Red Hat Security Advisory

RHSA-2026:4445

.NET 10.0 security update

Released 2026-03-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-10.0-10.0.4-1.el9_7, aspnetcore-runtime-dbg-10.0-10.0.4-1.el9_7, aspnetcore-targeting-pack-10.0-10.0.4-1.el9_7 +11
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el9_7

TI-2026-21120 CVE-2026-26127 · GHSA-73j8-2gch-69rq

MEDIUM 43

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02267 Published 2026-03-10 Fixed in 10.0.4, 9.0.14 CWE-125

TI-2026-21123 CVE-2026-26130 · GHSA-4vgm-c2wm-63mw

LOW 39

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03182 Published 2026-03-10 Fixed in 10.0.4, 8.0.25 +1 CWE-770