Red Hat Security AdvisoryRHSA-2026:8467
.NET 10.0 security update
Released 2026-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) aspnetcore-runtime-10.0-10.0.6-1.el10_1, aspnetcore-runtime-dbg-10.0-10.0.6-1.el10_1, aspnetcore-targeting-pack-10.0-10.0.6-1.el10_1 +11
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el10_1
Fixes 4 records
Priority MEDIUM 43
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02142 · Published 2026-04-14 · Fixed in 10.0.6, 8.0.26 +7 CWE-20
Priority MEDIUM 43
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01895 · Published 2026-04-14 · Fixed in 10.0.6, 8.0.26 +5 CWE-121
Priority MEDIUM 43
Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02279 · Published 2026-04-14 · Fixed in 10.0.6, 8.0.26 +3 CWE-138
Priority MEDIUM 42
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01753 · Published 2026-04-14 · Fixed in 10.0.6, 8.0.26 +4 CWE-400
THREATIST.IORead the docs