https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 09:58:13 +0000 https://vulnerability.circl.lu/sighting/9cddd845-22ca-4f56-8cfd-f5421bf2d7c9/export {"uuid": "9cddd845-22ca-4f56-8cfd-f5421bf2d7c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70183", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "content": "", "creation_timestamp": "2026-10-14T01:49:33.000000Z"} {"uuid": "9cddd845-22ca-4f56-8cfd-f5421bf2d7c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70183", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "content": "", "creation_timestamp": "2026-10-14T01:49:33.000000Z"} https://vulnerability.circl.lu/sighting/9cddd845-22ca-4f56-8cfd-f5421bf2d7c9/export Wed, 14 Oct 2026 01:49:33 +0000 https://vulnerability.circl.lu/sighting/6ade4f90-5a80-4331-8295-b05c418c6b07/export {"uuid": "6ade4f90-5a80-4331-8295-b05c418c6b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70183", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117436309359495705", "content": "CVE-2026-70183 ASP.NET Core Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-70183https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183#Microsoft #ASP.NETCore10.0 #ASP.NETCore11.0 #ASP.NETCore8.0 #ASP.NETCore9.0 #MicrosoftVisualStudio2022version17.14 #MicrosoftVisualStudio2026version18.10#CVE_2026_70183#bot", "creation_timestamp": "2026-10-13T23:57:53.392100Z"} {"uuid": "6ade4f90-5a80-4331-8295-b05c418c6b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70183", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117436309359495705", "content": "CVE-2026-70183 ASP.NET Core Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-70183https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183#Microsoft #ASP.NETCore10.0 #ASP.NETCore11.0 #ASP.NETCore8.0 #ASP.NETCore9.0 #MicrosoftVisualStudio2022version17.14 #MicrosoftVisualStudio2026version18.10#CVE_2026_70183#bot", "creation_timestamp": "2026-10-13T23:57:53.392100Z"} https://vulnerability.circl.lu/sighting/6ade4f90-5a80-4331-8295-b05c418c6b07/export Tue, 13 Oct 2026 23:57:53 +0000 https://vulnerability.circl.lu/sighting/452ac2fb-5d2d-49e5-8de2-d5cdf6c871f9/export {"uuid": "452ac2fb-5d2d-49e5-8de2-d5cdf6c871f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70183", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2106", "content": "", "creation_timestamp": "2026-10-13T21:00:00.000000Z"} {"uuid": "452ac2fb-5d2d-49e5-8de2-d5cdf6c871f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70183", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2106", "content": "", "creation_timestamp": "2026-10-13T21:00:00.000000Z"} https://vulnerability.circl.lu/sighting/452ac2fb-5d2d-49e5-8de2-d5cdf6c871f9/export Tue, 13 Oct 2026 21:00:00 +0000 https://vulnerability.circl.lu/sighting/72f9389d-4132-4ece-b692-608ecfd42c26/export {"uuid": "72f9389d-4132-4ece-b692-608ecfd42c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70183", "type": "seen", "source": "https://gist.github.com/alon710/d53a578a0f8f19f39ff618766fb7fe70", "content": "# CVE-2026-70183: CVE-2026-70183: Elevation of Privilege in ASP.NET Core and Visual Studio via Concurrent Race Condition\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-10-13\n> **Full Report:** https://cvereports.com/reports/CVE-2026-70183\n\n## Summary\nAn elevation of privilege vulnerability exists in ASP.NET Core and Microsoft Visual Studio due to improper synchronization during concurrent thread execution. Authenticated remote attackers with low privileges can exploit a timing window to manipulate shared resources and assume higher-level execution contexts.\n\n## TL;DR\nA race condition in ASP.NET Core allows authenticated low-privilege remote users to elevate privileges by sending high-frequency concurrent requests that hit unsynchronized shared memory structures.\n\n## Technical Details\n\n- **CWE ID**: CWE-362 (Race Condition)\n- **Attack Vector**: Network (AV:N)\n- **Attack Complexity**: High (AC:H)\n- **Privileges Required**: Low (PR:L)\n- **CVSS v3.1 Score**: 7.5 (High)\n- **CISA KEV Status**: Not Listed\n- **Exploit Status**: Unproven / No Public PoC\n- **Impact**: Elevation of Privilege (High C/I/A)\n\n## Affected Systems\n\n- ASP.NET Core 8.0 (< 8.0.32)\n- ASP.NET Core 9.0 (< 9.0.21)\n- ASP.NET Core 10.0 (< 10.0.13)\n- ASP.NET Core 11.0 (< 11.0.0-rc.2)\n- Microsoft Visual Studio 2022 v17.14 (< 17.14.42)\n- Microsoft Visual Studio 2026 v18.10 (< 18.10.4)\n- **ASP.NET Core 8.0**: < 8.0.32 (Fixed in: `8.0.32`)\n- **ASP.NET Core 9.0**: < 9.0.21 (Fixed in: `9.0.21`)\n- **ASP.NET Core 10.0**: < 10.0.13 (Fixed in: `10.0.13`)\n- **ASP.NET Core 11.0**: < 11.0.0-rc.2 (Fixed in: `11.0.0-rc.2`)\n- **Microsoft Visual Studio 2022 (v17.14)**: 17.14.0 - < 17.14.42 (Fixed in: `17.14.42`)\n- **Microsoft Visual Studio 2026 (v18.10)**: 18.10.0 - < 18.10.4 (Fixed in: `18.10.4`)\n\n## Mitigation\n\n- Apply vendor security patches for ASP.NET Core and Microsoft Visual Studio immediately.\n- Implement rate limiting and concurrency throttling on sensitive stateful API endpoints.\n- Enforce CI/CD package dependency scanning using dotnet list package --vulnerable.\n\n**Remediation Steps:**\n1. Identify all deployed ASP.NET Core runtime instances and Visual Studio development systems.\n2. Upgrade ASP.NET Core packages to fixed versions: 8.0.32, 9.0.21, 10.0.13, or 11.0.0-rc.2.\n3. Update Visual Studio 2022 to 17.14.42 or higher, and Visual Studio 2026 to 18.10.4 or higher.\n4. Recompile and redeploy affected ASP.NET Core applications across staging and production environments.\n\n## References\n\n- [Microsoft Security Advisory / Update Guide: CVE-2026-70183](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183)\n- [CVE Record Entry: CVE-2026-70183](https://www.cve.org/CVERecord?id=CVE-2026-70183)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-70183) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-13T20:30:56.000000Z"} {"uuid": "72f9389d-4132-4ece-b692-608ecfd42c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70183", "type": "seen", "source": "https://gist.github.com/alon710/d53a578a0f8f19f39ff618766fb7fe70", "content": "# CVE-2026-70183: CVE-2026-70183: Elevation of Privilege in ASP.NET Core and Visual Studio via Concurrent Race Condition\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-10-13\n> **Full Report:** https://cvereports.com/reports/CVE-2026-70183\n\n## Summary\nAn elevation of privilege vulnerability exists in ASP.NET Core and Microsoft Visual Studio due to improper synchronization during concurrent thread execution. Authenticated remote attackers with low privileges can exploit a timing window to manipulate shared resources and assume higher-level execution contexts.\n\n## TL;DR\nA race condition in ASP.NET Core allows authenticated low-privilege remote users to elevate privileges by sending high-frequency concurrent requests that hit unsynchronized shared memory structures.\n\n## Technical Details\n\n- **CWE ID**: CWE-362 (Race Condition)\n- **Attack Vector**: Network (AV:N)\n- **Attack Complexity**: High (AC:H)\n- **Privileges Required**: Low (PR:L)\n- **CVSS v3.1 Score**: 7.5 (High)\n- **CISA KEV Status**: Not Listed\n- **Exploit Status**: Unproven / No Public PoC\n- **Impact**: Elevation of Privilege (High C/I/A)\n\n## Affected Systems\n\n- ASP.NET Core 8.0 (< 8.0.32)\n- ASP.NET Core 9.0 (< 9.0.21)\n- ASP.NET Core 10.0 (< 10.0.13)\n- ASP.NET Core 11.0 (< 11.0.0-rc.2)\n- Microsoft Visual Studio 2022 v17.14 (< 17.14.42)\n- Microsoft Visual Studio 2026 v18.10 (< 18.10.4)\n- **ASP.NET Core 8.0**: < 8.0.32 (Fixed in: `8.0.32`)\n- **ASP.NET Core 9.0**: < 9.0.21 (Fixed in: `9.0.21`)\n- **ASP.NET Core 10.0**: < 10.0.13 (Fixed in: `10.0.13`)\n- **ASP.NET Core 11.0**: < 11.0.0-rc.2 (Fixed in: `11.0.0-rc.2`)\n- **Microsoft Visual Studio 2022 (v17.14)**: 17.14.0 - < 17.14.42 (Fixed in: `17.14.42`)\n- **Microsoft Visual Studio 2026 (v18.10)**: 18.10.0 - < 18.10.4 (Fixed in: `18.10.4`)\n\n## Mitigation\n\n- Apply vendor security patches for ASP.NET Core and Microsoft Visual Studio immediately.\n- Implement rate limiting and concurrency throttling on sensitive stateful API endpoints.\n- Enforce CI/CD package dependency scanning using dotnet list package --vulnerable.\n\n**Remediation Steps:**\n1. Identify all deployed ASP.NET Core runtime instances and Visual Studio development systems.\n2. Upgrade ASP.NET Core packages to fixed versions: 8.0.32, 9.0.21, 10.0.13, or 11.0.0-rc.2.\n3. Update Visual Studio 2022 to 17.14.42 or higher, and Visual Studio 2026 to 18.10.4 or higher.\n4. Recompile and redeploy affected ASP.NET Core applications across staging and production environments.\n\n## References\n\n- [Microsoft Security Advisory / Update Guide: CVE-2026-70183](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183)\n- [CVE Record Entry: CVE-2026-70183](https://www.cve.org/CVERecord?id=CVE-2026-70183)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-70183) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-13T20:30:56.000000Z"} https://vulnerability.circl.lu/sighting/72f9389d-4132-4ece-b692-608ecfd42c26/export Tue, 13 Oct 2026 20:30:56 +0000 https://vulnerability.circl.lu/sighting/4bf8ba4e-d758-45aa-b125-5f38849e09b4/export {"uuid": "4bf8ba4e-d758-45aa-b125-5f38849e09b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70183", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426", "content": "", "creation_timestamp": "2026-10-13T11:56:15.000000Z"} {"uuid": "4bf8ba4e-d758-45aa-b125-5f38849e09b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70183", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426", "content": "", "creation_timestamp": "2026-10-13T11:56:15.000000Z"} https://vulnerability.circl.lu/sighting/4bf8ba4e-d758-45aa-b125-5f38849e09b4/export Tue, 13 Oct 2026 11:56:15 +0000