Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat .NET 8.0 may allow attackers to bypass protections

published 2 months ago

Summary

Red Hat has released an update for the .NET 8.0 runtime that fixes several weaknesses that could let a malicious user run code or access data they shouldn't. Organizations using .NET 8.0 on Red Hat should apply the update as soon as possible to keep their applications secure and stable.

What to do

Update redhat aspnetcore-runtime-8.0 to version 0:8.0.30-1.el9_4.
Update redhat aspnetcore-runtime-dbg-8.0 to version 0:8.0.30-1.el9_4.
Update redhat aspnetcore-targeting-pack-8.0 to version 0:8.0.30-1.el9_4.
Update redhat dotnet-apphost-pack-8.0 to version 0:8.0.30-1.el9_4.
Update redhat dotnet-apphost-pack-8.0-debuginfo to version 0:8.0.30-1.el9_4.
Update redhat dotnet-host to version 0:8.0.30-1.el9_4.
Update redhat dotnet-host-debuginfo to version 0:8.0.30-1.el9_4.
Update redhat dotnet-hostfxr-8.0 to version 0:8.0.30-1.el9_4.
Update redhat dotnet-hostfxr-8.0-debuginfo to version 0:8.0.30-1.el9_4.
Update redhat dotnet-runtime-8.0 to version 0:8.0.30-1.el9_4.
Update redhat dotnet-runtime-8.0-debuginfo to version 0:8.0.30-1.el9_4.
Update redhat dotnet-runtime-dbg-8.0 to version 0:8.0.30-1.el9_4.
Update redhat dotnet-sdk-8.0 to version 0:8.0.130-1.el9_4.
Update redhat dotnet-sdk-8.0-debuginfo to version 0:8.0.130-1.el9_4.
Update redhat dotnet-sdk-dbg-8.0 to version 0:8.0.130-1.el9_4.
Update redhat dotnet-targeting-pack-8.0 to version 0:8.0.30-1.el9_4.
Update redhat dotnet-templates-8.0 to version 0:8.0.130-1.el9_4.
Update redhat dotnet8.0 to version 0:8.0.130-1.el9_4.
Update redhat dotnet8.0-debuginfo to version 0:8.0.130-1.el9_4.
Update redhat dotnet8.0-debugsource to version 0:8.0.130-1.el9_4.
Update redhat netstandard-targeting-pack-2.1 to version 0:8.0.130-1.el9_4.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.4::appstream	redhat	aspnetcore-runtime-8.0	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	aspnetcore-runtime-dbg-8.0	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	aspnetcore-targeting-pack-8.0	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-apphost-pack-8.0	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-apphost-pack-8.0-debuginfo	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-host	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-host-debuginfo	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-hostfxr-8.0	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-hostfxr-8.0-debuginfo	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-runtime-8.0	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-runtime-8.0-debuginfo	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-runtime-dbg-8.0	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-sdk-8.0	< 0:8.0.130-1.el9_4 Fix: upgrade to 0:8.0.130-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-sdk-8.0-debuginfo	< 0:8.0.130-1.el9_4 Fix: upgrade to 0:8.0.130-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-sdk-dbg-8.0	< 0:8.0.130-1.el9_4 Fix: upgrade to 0:8.0.130-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-targeting-pack-8.0	< 0:8.0.30-1.el9_4 Fix: upgrade to 0:8.0.30-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet-templates-8.0	< 0:8.0.130-1.el9_4 Fix: upgrade to 0:8.0.130-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet8.0	< 0:8.0.130-1.el9_4 Fix: upgrade to 0:8.0.130-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet8.0-debuginfo	< 0:8.0.130-1.el9_4 Fix: upgrade to 0:8.0.130-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	dotnet8.0-debugsource	< 0:8.0.130-1.el9_4 Fix: upgrade to 0:8.0.130-1.el9_4
Red Hat:rhel_e4s:9.4::appstream	redhat	netstandard-targeting-pack-2.1	< 0:8.0.130-1.el9_4 Fix: upgrade to 0:8.0.130-1.el9_4

Original advisory text

Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

References

https://access.redhat.com/errata/RHSA-2026:58568 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2499217 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500109 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500189 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500492 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500502 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500509 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500515 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500556 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500562 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500563 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500565 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500577 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500580 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500581 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500587 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500589 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500593 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2512175 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2512179 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2512180 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2512185 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58568.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-47300 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47300 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47300 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-47302 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47302 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47302 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-47303 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47303 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47303 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-47304 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47304 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47304 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50524 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50524 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50524 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50525 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50525 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50525 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50526 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50526 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50526 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50527 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50527 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50527 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50528 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50528 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50528 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50646 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50646 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50646 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50648 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50648 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50648 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50649 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50649 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50649 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50650 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50650 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50650 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50651 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50651 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50651 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-50659 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50659 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50659 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-56170 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-56170 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-56170 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-57108 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-57108 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-57108 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-62899 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-62899 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-62899 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-62900 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-62900 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-62900 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-62901 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-62901 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-62901 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-62909 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-62909 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-62909 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published24 Aug 2026

Updated27 Aug 2026

First seen27 Aug 2026

Sources

RHSA-2026:58568 · OSV

Track software like this

Free during beta