HIGHCVSS 7.80% EPSS
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Published 2026-10-29 · last modified 2026-10-30
| Vendor | Product |
|---|---|
| microsoft | asp.net core runtime and targeting-pack linux tarballs (microsoft-published) |
| microsoft | .net 10.0 installed on linux |
| microsoft | .net 10.0 installed on mac os |
| microsoft | .net 10.0 installed on windows |
| microsoft | .net 11.0 installed on linux |
| microsoft | .net 11.0 installed on mac os |
| microsoft | .net 11.0 installed on windows |
| microsoft | .net 8.0 installed on linux |
| microsoft | .net 8.0 installed on mac os |
| microsoft | .net 8.0 installed on windows |
| microsoft | .net 9.0 installed on linux |
| microsoft | .net 9.0 installed on mac os |
| microsoft | .net 9.0 installed on windows |
| microsoft | .net source-build linux tarballs (all archive types) |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.