Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Microsoft .NET 8.0 may let attackers run code

published 2 months ago

Summary

The latest .NET 8.0 runtime and libraries have a weakness that could allow a malicious user to execute unwanted programs on your server. This can lead to data loss, service disruption, or further compromise of your network. Install the Red Hat security update for .NET 8.0 as soon as possible to close the gap.

What to do

Update redhat aspnetcore-runtime-8.0 to version 0:8.0.30-1.el10_0.
Update redhat aspnetcore-runtime-dbg-8.0 to version 0:8.0.30-1.el10_0.
Update redhat aspnetcore-targeting-pack-8.0 to version 0:8.0.30-1.el10_0.
Update redhat dotnet-apphost-pack-8.0 to version 0:8.0.30-1.el10_0.
Update redhat dotnet-apphost-pack-8.0-debuginfo to version 0:8.0.30-1.el10_0.
Update redhat dotnet-hostfxr-8.0 to version 0:8.0.30-1.el10_0.
Update redhat dotnet-hostfxr-8.0-debuginfo to version 0:8.0.30-1.el10_0.
Update redhat dotnet-runtime-8.0 to version 0:8.0.30-1.el10_0.
Update redhat dotnet-runtime-8.0-debuginfo to version 0:8.0.30-1.el10_0.
Update redhat dotnet-runtime-dbg-8.0 to version 0:8.0.30-1.el10_0.
Update redhat dotnet-sdk-8.0 to version 0:8.0.130-1.el10_0.
Update redhat dotnet-sdk-8.0-debuginfo to version 0:8.0.130-1.el10_0.
Update redhat dotnet-sdk-dbg-8.0 to version 0:8.0.130-1.el10_0.
Update redhat dotnet-targeting-pack-8.0 to version 0:8.0.30-1.el10_0.
Update redhat dotnet-templates-8.0 to version 0:8.0.130-1.el10_0.
Update redhat dotnet8.0 to version 0:8.0.130-1.el10_0.
Update redhat dotnet8.0-debugsource to version 0:8.0.130-1.el10_0.
Update redhat dotnet-sdk-8.0-source-built-artifacts to version 0:8.0.130-1.el10_0.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux_eus:10.0	redhat	aspnetcore-runtime-8.0	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	aspnetcore-runtime-dbg-8.0	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	aspnetcore-targeting-pack-8.0	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-apphost-pack-8.0	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-apphost-pack-8.0-debuginfo	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-hostfxr-8.0	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-hostfxr-8.0-debuginfo	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-runtime-8.0	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-runtime-8.0-debuginfo	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-runtime-dbg-8.0	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-sdk-8.0	< 0:8.0.130-1.el10_0 Fix: upgrade to 0:8.0.130-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-sdk-8.0-debuginfo	< 0:8.0.130-1.el10_0 Fix: upgrade to 0:8.0.130-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-sdk-dbg-8.0	< 0:8.0.130-1.el10_0 Fix: upgrade to 0:8.0.130-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-targeting-pack-8.0	< 0:8.0.30-1.el10_0 Fix: upgrade to 0:8.0.30-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-templates-8.0	< 0:8.0.130-1.el10_0 Fix: upgrade to 0:8.0.130-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet8.0	< 0:8.0.130-1.el10_0 Fix: upgrade to 0:8.0.130-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet8.0-debugsource	< 0:8.0.130-1.el10_0 Fix: upgrade to 0:8.0.130-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-sdk-8.0-source-built-artifacts	< 0:8.0.130-1.el10_0 Fix: upgrade to 0:8.0.130-1.el10_0

Original advisory text

Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

References

https://access.redhat.com/errata/RHSA-2026:58566 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2499217 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500109 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500189 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500492 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500502 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500509 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500515 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500556 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500562 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500563 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500565 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500577 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500580 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500581 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500587 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500589 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500593 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2512175 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2512179 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2512180 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2512185 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58566.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-47300 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47300 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47300 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-47302 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47302 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47302 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-47303 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47303 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47303 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-47304 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47304 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47304 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50524 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50524 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50524 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50525 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50525 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50525 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50526 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50526 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50526 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50527 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50527 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50527 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50528 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50528 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50528 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50646 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50646 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50646 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50648 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50648 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50648 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50649 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50649 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50649 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50650 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50650 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50650 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50651 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50651 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50651 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-50659 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50659 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50659 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-56170 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-56170 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-56170 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-57108 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-57108 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-57108 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-62899 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-62899 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-62899 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-62900 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-62900 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-62900 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-62901 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-62901 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-62901 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-62909 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-62909 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-62909 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published24 Aug 2026

Updated27 Aug 2026

First seen27 Aug 2026

Sources

RHSA-2026:58566 · OSV

Track software like this

Free during beta