Red Hat Security AdvisoryRHSA-2026:13283
.NET 8.0 security update
Released 2026-05-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.6) dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) aspnetcore-runtime-8.0-8.0.26-1.el9_6, aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_6, aspnetcore-targeting-pack-8.0-8.0.26-1.el9_6 +9
Fixes 4 records
Priority MEDIUM 43
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02142 · Published 2026-04-14 · Fixed in 10.0.6, 8.0.26 +7 CWE-20
Priority MEDIUM 43
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01895 · Published 2026-04-14 · Fixed in 10.0.6, 8.0.26 +5 CWE-121
Priority MEDIUM 43
Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02279 · Published 2026-04-14 · Fixed in 10.0.6, 8.0.26 +3 CWE-138
Priority MEDIUM 42
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01753 · Published 2026-04-14 · Fixed in 10.0.6, 8.0.26 +4 CWE-400