CVE-2026-96225

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-x64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.osx-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.osx-x64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-arm64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-x64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.osx-arm64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.osx-x64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-arm versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.osx-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.osx-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-arm versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-arm64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-x64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.osx-arm64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.osx-x64 versions 9.0.0 through 9.0.20

Description Improper link resolution before file access in .NET allows an authorized local attacker to elevate privileges. Unix named-mutex and shared-memory paths can be manipulated through insecure global directories, symlink races, and unsafe permission changes. This can enable attackers to truncate or overwrite files and widen directory permissions.

Recommendations Update Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-x64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.osx-arm64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.osx-x64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-arm versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-arm64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-musl-arm versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-x64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.osx-arm64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.osx-x64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-arm versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-musl-arm versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.osx-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.osx-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-arm versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-arm64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-musl-arm versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-x64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.osx-arm64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.osx-x64 versions 9.0.0 through 9.0.20 to version 9.0.21. Self-contained applications targeting any of the impacted versions must be recompiled and redeployed.