Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Jiheun Kim

Researcher fromENKI WhiteHat
#41050of 60,399
7.5Total CVSS
Vulnerabilities · 1
PT-2026-143637
2026-11-10
7.5
CVE-2026-114155
Microsoft
Microsoft.Dotnet.Hotreload.Watch.Aspire
A time-of-check time-of-use (toctou) race condition exists in the `dotnet-watch` component of the .NET SDK. A toctou race condition occurs when a program checks the state of a resource and then acts upon that resource, but the state changes between the check and the action. This flaw allows an authorized local attacker to replace or modify a temporary solution file used by `dotnet-watch`, which can lead to the alteration of a subsequent build and local privilege elevation. This issue affects Linux and macOS platforms.