CVE-2026-96231

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-x64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.osx-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.osx-x64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-arm64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-x64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.osx-arm64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.osx-x64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-arm versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-arm64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-x64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.osx-arm64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.osx-x64 versions 10.0.0 through 10.0.12 Microsoft.NETCore.App.Runtime.linux-arm versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.linux-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.osx-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.NETCore.App.Runtime.osx-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1

Description Improper link resolution before file access in .NET allows an authorized local attacker to elevate privileges. On Linux and macOS, Unix named-mutex and shared-memory paths can be manipulated via insecure global directories, symlink races, and unsafe permission changes. This can enable attackers to truncate or overwrite files, widen directory permissions, or achieve privilege escalation.

Recommendations Update Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-x64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.osx-arm64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.osx-x64 versions 8.0.0 through 8.0.31 to version 8.0.32. Update Microsoft.NETCore.App.Runtime.linux-arm versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-arm64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-musl-arm versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-x64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.osx-arm64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.osx-x64 versions 9.0.0 through 9.0.20 to version 9.0.21. Update Microsoft.NETCore.App.Runtime.linux-arm versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-arm64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-musl-arm versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-x64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.osx-arm64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.osx-x64 versions 10.0.0 through 10.0.12 to version 10.0.13. Update Microsoft.NETCore.App.Runtime.linux-arm versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-musl-arm versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-musl-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.linux-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.osx-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Update Microsoft.NETCore.App.Runtime.osx-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 to version 11.0.0-rc.2. Self-contained applications targeting any of the impacted versions must be recompiled and redeployed.