Read the docs
Microsoft update

KB5097149

Security Update

View on Microsoft →

Fixed in

Fixes 3 records

TI-2026-33337 CVE-2026-45591 · GHSA-f8h2-vmm9-qhj6

ASP.NET Core Denial of Service Vulnerability

Priority MEDIUM 44

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02481 Published 2026-06-09 Fixed in 10.0.9, 8.0.28 +2 CWE-400
TI-2026-33261 CVE-2026-45490 · GHSA-77gm-m6x5-jf4f

.NET SDK Elevation of Privilege Vulnerability

Priority LOW 36

Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00384 Published 2026-06-09 Fixed in 10.0.9, 8.0.28 +1 CWE-285
TI-2026-33262 CVE-2026-45491 · GHSA-7q4v-2mr6-5gpx

.NET Tampering Vulnerability

Priority LOW 28

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00388 Published 2026-06-09 Fixed in 10.0.9, 8.0.28 +1 CWE-59