Red Hat Security AdvisoryRHSA-2026:27171
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-06-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images dotnet-sdk-9.0-9.0.118-1.hum1@aarch64, dotnet-sdk-9.0-9.0.118-1.hum1@x86_64, dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.hum1@aarch64 +10
Fixes 13 records
Priority HIGH 66
ws is an open source WebSocket client and server for Node.js.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00745 · Published 2026-05-15 · Partial fix · 8.20.1 CWE-908
Priority MEDIUM 43
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04017 · Published 2026-07-14 · Fixed in 8.0.29, 9.0.18 +8 CWE-502
Priority MEDIUM 43
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04017 · Published 2026-07-14 · Fixed in 8.0.29, 9.0.18 +10 CWE-502
Priority MEDIUM 43
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00609 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-302
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +1 CWE-843
Priority MEDIUM 41
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-770
Priority MEDIUM 41
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +11 CWE-770
Priority MEDIUM 41
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +11 CWE-121
Priority MEDIUM 41
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +12 CWE-770
Priority MEDIUM 41
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01232 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-1287
Priority MEDIUM 41
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +11 CWE-770
Priority LOW 36
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00462 · Published 2026-07-14 · Fixed in 8.0.29, 9.0.18 +10 CWE-94
Priority LOW 32
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00224 · Published 2026-07-14 · Fixed in 10.0.10, 8.0.29 +4 CWE-345