Advisory Database
  • Advisories
  • Dependency Scanning
  1. nuget
  2. ›
  3. Microsoft.NETCore.App.Runtime.linux-x64
  4. ›
  5. GHSA-387c-qmrw-59qv

GHSA-387c-qmrw-59qv: Duplicate Advisory: Microsoft Security Advisory CVE-2026-26131 – .NET Elevation of Privilege Vulnerability

March 10, 2026 (updated March 11, 2026)

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-crjq-wm6x-6qx7. This link is maintained to preserve external references.

Original Description

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.

References

  • github.com/advisories/GHSA-387c-qmrw-59qv
  • github.com/dotnet/dotnet
  • msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26131
  • nvd.nist.gov/vuln/detail/CVE-2026-26131

Code Behaviors & Features

Detect and mitigate GHSA-387c-qmrw-59qv with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions starting from 10.0.0 before 10.0.4

Fixed versions

  • 10.0.4

Solution

Upgrade to version 10.0.4 or above.

Impact 7.8 HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Learn more about CVSS

Weakness

  • CWE-276: Incorrect Default Permissions

Source file

nuget/Microsoft.NETCore.App.Runtime.linux-x64/GHSA-387c-qmrw-59qv.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 25 Mar 2026 00:17:11 +0000.