RHSA-2026:84693

Vulnerability from csaf_redhat - Published: 2026-10-19 06:12 - Updated: 2026-10-21 04:36
Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs: dotnet8.0: * aspnetcore-runtime-8.0-8.0.32-0.1.hum1 (aarch64, x86_64) * aspnetcore-runtime-dbg-8.0-8.0.32-0.1.hum1 (aarch64, x86_64) * aspnetcore-targeting-pack-8.0-8.0.32-0.1.hum1 (aarch64, x86_64) * dotnet-apphost-pack-8.0-8.0.32-0.1.hum1 (aarch64, x86_64) * dotnet-hostfxr-8.0-8.0.32-0.1.hum1 (aarch64, x86_64) * dotnet-runtime-8.0-8.0.32-0.1.hum1 (aarch64, x86_64) * dotnet-runtime-dbg-8.0-8.0.32-0.1.hum1 (aarch64, x86_64) * dotnet-sdk-8.0-8.0.132-0.1.hum1 (aarch64, x86_64) * dotnet-sdk-8.0-source-built-artifacts-8.0.132-0.1.hum1 (aarch64, x86_64) * dotnet-sdk-dbg-8.0-8.0.132-0.1.hum1 (aarch64, x86_64) * dotnet-targeting-pack-8.0-8.0.32-0.1.hum1 (aarch64, x86_64) * dotnet-templates-8.0-8.0.132-0.1.hum1 (aarch64, x86_64) * dotnet8.0-8.0.132-0.1.hum1.src (src) Security Fix(es): dotnet8.0: * CVE-2026-70162 * CVE-2026-70159
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-58280

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64 —
Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64 —
Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64 —
Threats
Impact Important
CVE-2026-66822

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-201 - Insertion of Sensitive Information Into Sent Data
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Moderate
CVE-2026-69651

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-70007

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code on the target system over the network. By convincing a user to process specially crafted input, an attacker can trigger memory corruption and compromise the affected system.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-70035

A flaw was found in .NET. The vulnerability stems from insecure deserialization, where data transmitted over a network is reconstructed without adequate validation. A remote, unauthenticated attacker could exploit this issue by convincing a user to process specially crafted input. Successful exploitation enables the attacker to achieve arbitrary code execution on the target system.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-502 - Deserialization of Untrusted Data
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-70159

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src —
Vendor Fix fix
Threats
Impact Important
CVE-2026-70162

A flaw was found in dotnet. The Microsoft Common Object Runtime Library improperly handles incoming web requests. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted web requests to an affected application, resulting in a Denial of Service (DoS).

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 25 products, the same list as for CVE-2026-70159
Threats
Impact Moderate
CVE-2026-70197

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code over the network. By sending specially crafted input to an affected application, an attacker can corrupt system memory and compromise the host environment.

CWE-787 - Out-of-bounds Write
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-83520

A flaw was found in .NET. An insecure deserialization vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution over a network. By convincing an application or user to process specially crafted serialized data, an attacker can execute malicious commands with the privileges of the affected application.

CWE-502 - Deserialization of Untrusted Data
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-85363

A flaw was found in .NET. An integer overflow issue allows an unauthenticated remote attacker to achieve privilege escalation over the network. By convincing a user to process specially crafted input, an attacker can cause a calculation error that leads to unauthorized access with elevated permissions.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-87697

A flaw was found in dotnet. A remote attacker can achieve arbitrary code execution by tricking an application or user into processing maliciously crafted data during deserialization (the process of reconstructing data into an application object). Successful exploitation allows the attacker to execute unauthorized code over the network within the context of the running application.

CWE-502 - Deserialization of Untrusted Data
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-96222

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-96225

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-96231

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-96233

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-96234

A flaw was found in .NET. An origin validation error allows an unauthorized remote attacker to disclose sensitive information over the network. Successful exploitation requires user interaction and enables an attacker to access restricted data without proper authorization.

CWE-346 - Origin Validation Error
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Moderate
CVE-2026-96237

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-427 - Uncontrolled Search Path Element
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Important
CVE-2026-96238

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CWE-427 - Uncontrolled Search Path Element
Affected products
Fixed 9 products, the same list as for CVE-2026-58280
Known not affected 16 products, the same list as for CVE-2026-58280
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2026:84693 self
https://access.redhat.com/security/cve/CVE-2026-70159 external
https://access.redhat.com/security/cve/CVE-2026-70162 external
https://access.redhat.com/security/updates/classi… external
https://images.redhat.com/ external
https://access.redhat.com/security/cve/CVE-2026-70007 external
https://access.redhat.com/security/cve/CVE-2026-87697 external
https://access.redhat.com/security/cve/CVE-2026-70035 external
https://access.redhat.com/security/cve/CVE-2026-70197 external
https://access.redhat.com/security/cve/CVE-2026-85363 external
https://access.redhat.com/security/cve/CVE-2026-96234 external
https://access.redhat.com/security/cve/CVE-2026-83520 external
https://access.redhat.com/security/cve/CVE-2026-58280 external
https://access.redhat.com/security/cve/CVE-2026-69651 external
https://access.redhat.com/security/cve/CVE-2026-66822 external
https://access.redhat.com/security/cve/CVE-2026-96222 external
https://access.redhat.com/security/cve/CVE-2026-96237 external
https://access.redhat.com/security/cve/CVE-2026-96238 external
https://access.redhat.com/security/cve/CVE-2026-96233 external
https://access.redhat.com/security/cve/CVE-2026-96231 external
https://access.redhat.com/security/cve/CVE-2026-96225 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-58280 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548778 external
https://www.cve.org/CVERecord?id=CVE-2026-58280 external
https://nvd.nist.gov/vuln/detail/CVE-2026-58280 external
https://access.redhat.com/security/cve/CVE-2026-66822 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548781 external
https://www.cve.org/CVERecord?id=CVE-2026-66822 external
https://nvd.nist.gov/vuln/detail/CVE-2026-66822 external
https://access.redhat.com/security/cve/CVE-2026-69651 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548784 external
https://www.cve.org/CVERecord?id=CVE-2026-69651 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69651 external
https://access.redhat.com/security/cve/CVE-2026-70007 self
https://bugzilla.redhat.com/show_bug.cgi?id=2551740 external
https://www.cve.org/CVERecord?id=CVE-2026-70007 external
https://nvd.nist.gov/vuln/detail/CVE-2026-70007 external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://access.redhat.com/security/cve/CVE-2026-70035 self
https://bugzilla.redhat.com/show_bug.cgi?id=2551409 external
https://www.cve.org/CVERecord?id=CVE-2026-70035 external
https://nvd.nist.gov/vuln/detail/CVE-2026-70035 external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://access.redhat.com/security/cve/CVE-2026-70159 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548786 external
https://www.cve.org/CVERecord?id=CVE-2026-70159 external
https://nvd.nist.gov/vuln/detail/CVE-2026-70159 external
https://access.redhat.com/security/cve/CVE-2026-70162 self
https://bugzilla.redhat.com/show_bug.cgi?id=2551706 external
https://www.cve.org/CVERecord?id=CVE-2026-70162 external
https://nvd.nist.gov/vuln/detail/CVE-2026-70162 external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://access.redhat.com/security/cve/CVE-2026-70197 self
https://bugzilla.redhat.com/show_bug.cgi?id=2551007 external
https://www.cve.org/CVERecord?id=CVE-2026-70197 external
https://nvd.nist.gov/vuln/detail/CVE-2026-70197 external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://access.redhat.com/security/cve/CVE-2026-83520 self
https://bugzilla.redhat.com/show_bug.cgi?id=2550820 external
https://www.cve.org/CVERecord?id=CVE-2026-83520 external
https://nvd.nist.gov/vuln/detail/CVE-2026-83520 external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://access.redhat.com/security/cve/CVE-2026-85363 self
https://bugzilla.redhat.com/show_bug.cgi?id=2550946 external
https://www.cve.org/CVERecord?id=CVE-2026-85363 external
https://nvd.nist.gov/vuln/detail/CVE-2026-85363 external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://access.redhat.com/security/cve/CVE-2026-87697 self
https://bugzilla.redhat.com/show_bug.cgi?id=2551475 external
https://www.cve.org/CVERecord?id=CVE-2026-87697 external
https://nvd.nist.gov/vuln/detail/CVE-2026-87697 external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://access.redhat.com/security/cve/CVE-2026-96222 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548802 external
https://www.cve.org/CVERecord?id=CVE-2026-96222 external
https://nvd.nist.gov/vuln/detail/CVE-2026-96222 external
https://access.redhat.com/security/cve/CVE-2026-96225 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548803 external
https://www.cve.org/CVERecord?id=CVE-2026-96225 external
https://nvd.nist.gov/vuln/detail/CVE-2026-96225 external
https://access.redhat.com/security/cve/CVE-2026-96231 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548805 external
https://www.cve.org/CVERecord?id=CVE-2026-96231 external
https://nvd.nist.gov/vuln/detail/CVE-2026-96231 external
https://access.redhat.com/security/cve/CVE-2026-96233 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548806 external
https://www.cve.org/CVERecord?id=CVE-2026-96233 external
https://nvd.nist.gov/vuln/detail/CVE-2026-96233 external
https://access.redhat.com/security/cve/CVE-2026-96234 self
https://bugzilla.redhat.com/show_bug.cgi?id=2551106 external
https://www.cve.org/CVERecord?id=CVE-2026-96234 external
https://nvd.nist.gov/vuln/detail/CVE-2026-96234 external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://access.redhat.com/security/cve/CVE-2026-96237 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548808 external
https://www.cve.org/CVERecord?id=CVE-2026-96237 external
https://nvd.nist.gov/vuln/detail/CVE-2026-96237 external
https://access.redhat.com/security/cve/CVE-2026-96238 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548809 external
https://www.cve.org/CVERecord?id=CVE-2026-96238 external
https://nvd.nist.gov/vuln/detail/CVE-2026-96238 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\ndotnet8.0:\n  * aspnetcore-runtime-8.0-8.0.32-0.1.hum1 (aarch64, x86_64)\n  * aspnetcore-runtime-dbg-8.0-8.0.32-0.1.hum1 (aarch64, x86_64)\n  * aspnetcore-targeting-pack-8.0-8.0.32-0.1.hum1 (aarch64, x86_64)\n  * dotnet-apphost-pack-8.0-8.0.32-0.1.hum1 (aarch64, x86_64)\n  * dotnet-hostfxr-8.0-8.0.32-0.1.hum1 (aarch64, x86_64)\n  * dotnet-runtime-8.0-8.0.32-0.1.hum1 (aarch64, x86_64)\n  * dotnet-runtime-dbg-8.0-8.0.32-0.1.hum1 (aarch64, x86_64)\n  * dotnet-sdk-8.0-8.0.132-0.1.hum1 (aarch64, x86_64)\n  * dotnet-sdk-8.0-source-built-artifacts-8.0.132-0.1.hum1 (aarch64, x86_64)\n  * dotnet-sdk-dbg-8.0-8.0.132-0.1.hum1 (aarch64, x86_64)\n  * dotnet-targeting-pack-8.0-8.0.32-0.1.hum1 (aarch64, x86_64)\n  * dotnet-templates-8.0-8.0.132-0.1.hum1 (aarch64, x86_64)\n  * dotnet8.0-8.0.132-0.1.hum1.src (src)\n\nSecurity Fix(es):\n\ndotnet8.0:\n  * CVE-2026-70162\n  * CVE-2026-70159",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:84693",
        "url": "https://access.redhat.com/errata/RHSA-2026:84693"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-70159",
        "url": "https://access.redhat.com/security/cve/CVE-2026-70159"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-70162",
        "url": "https://access.redhat.com/security/cve/CVE-2026-70162"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-70007",
        "url": "https://access.redhat.com/security/cve/CVE-2026-70007"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-87697",
        "url": "https://access.redhat.com/security/cve/CVE-2026-87697"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-70035",
        "url": "https://access.redhat.com/security/cve/CVE-2026-70035"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-70197",
        "url": "https://access.redhat.com/security/cve/CVE-2026-70197"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-85363",
        "url": "https://access.redhat.com/security/cve/CVE-2026-85363"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-96234",
        "url": "https://access.redhat.com/security/cve/CVE-2026-96234"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-83520",
        "url": "https://access.redhat.com/security/cve/CVE-2026-83520"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-58280",
        "url": "https://access.redhat.com/security/cve/CVE-2026-58280"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69651",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69651"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-66822",
        "url": "https://access.redhat.com/security/cve/CVE-2026-66822"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-96222",
        "url": "https://access.redhat.com/security/cve/CVE-2026-96222"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-96237",
        "url": "https://access.redhat.com/security/cve/CVE-2026-96237"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-96238",
        "url": "https://access.redhat.com/security/cve/CVE-2026-96238"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-96233",
        "url": "https://access.redhat.com/security/cve/CVE-2026-96233"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-96231",
        "url": "https://access.redhat.com/security/cve/CVE-2026-96231"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-96225",
        "url": "https://access.redhat.com/security/cve/CVE-2026-96225"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84693.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
    "tracking": {
      "current_release_date": "2026-10-21T04:36:15+00:00",
      "generator": {
        "date": "2026-10-21T04:36:15+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:84693",
      "initial_release_date": "2026-10-19T06:12:24+00:00",
      "revision_history": [
        {
          "date": "2026-10-19T06:12:24+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-20T16:10:29+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-21T04:36:15+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
                "product": {
                  "name": "aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_id": "aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.32-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
                "product": {
                  "name": "aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.32-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
                "product": {
                  "name": "aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_id": "aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.32-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
                "product": {
                  "name": "dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_id": "dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.32-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
                "product": {
                  "name": "dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_id": "dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.32-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
                "product": {
                  "name": "dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_id": "dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.32-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
                "product": {
                  "name": "dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_id": "dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.32-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
                "product": {
                  "name": "dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
                  "product_id": "dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.132-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
                "product": {
                  "name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
                  "product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.132-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
                "product": {
                  "name": "dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
                  "product_id": "dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.132-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
                "product": {
                  "name": "dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_id": "dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.32-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
                "product": {
                  "name": "dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
                  "product_id": "dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.132-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
                "product": {
                  "name": "aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_id": "aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.32-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
                "product": {
                  "name": "aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.32-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_id": "aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.32-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_id": "dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.32-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
                "product": {
                  "name": "dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_id": "dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.32-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
                "product": {
                  "name": "dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_id": "dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.32-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
                "product": {
                  "name": "dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_id": "dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.32-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
                "product": {
                  "name": "dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
                  "product_id": "dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.132-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
                "product": {
                  "name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
                  "product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.132-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
                "product": {
                  "name": "dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
                  "product_id": "dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.132-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_id": "dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.32-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
                "product": {
                  "name": "dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
                  "product_id": "dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.132-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet8.0-0:8.0.132-0.1.hum1@src",
                "product": {
                  "name": "dotnet8.0-0:8.0.132-0.1.hum1@src",
                  "product_id": "dotnet8.0-0:8.0.132-0.1.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet8.0@8.0.132-0.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64"
        },
        "product_reference": "aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64"
        },
        "product_reference": "aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64"
        },
        "product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64"
        },
        "product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64"
        },
        "product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64"
        },
        "product_reference": "dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        },
        "product_reference": "dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64"
        },
        "product_reference": "dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64"
        },
        "product_reference": "dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64"
        },
        "product_reference": "dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64"
        },
        "product_reference": "dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64"
        },
        "product_reference": "dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64"
        },
        "product_reference": "dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64"
        },
        "product_reference": "dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64"
        },
        "product_reference": "dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64"
        },
        "product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64"
        },
        "product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64"
        },
        "product_reference": "dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64"
        },
        "product_reference": "dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64"
        },
        "product_reference": "dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        },
        "product_reference": "dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64"
        },
        "product_reference": "dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64"
        },
        "product_reference": "dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet8.0-0:8.0.132-0.1.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        },
        "product_reference": "dotnet8.0-0:8.0.132-0.1.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-58280",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-10-14T17:46:49+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548778"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58280"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548778",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548778"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58280",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58280"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58280",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58280"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability"
    },
    {
      "cve": "CVE-2026-66822",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-10-14T17:46:49+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548781"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A moderate information disclosure vulnerability was found in the .NET runtime. When a .NET application using SocketsHttpHandler sends a request through a proxy that authenticates with basic credentials and the response is an HTTP redirect, the Proxy-Authorization header can be incorrectly retained and forwarded with the redirected request, leaking the basic proxy credentials to the destination server. This allows an unauthorized remote attacker to disclose sensitive proxy authentication information over a network. Red Hat rates this flaw Moderate severity with a CVSS 3.1 base score of 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N), consistent with the upstream assessment. All currently tracked Red Hat product streams shipping the affected dotnet8.0, dotnet9.0, and dotnet10.0 components, including Red Hat Enterprise Linux and Red Hat Hardened Images, are affected, and fixes are being pursued through the respective product channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66822"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548781",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548781"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66822",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66822"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66822",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66822"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability"
    },
    {
      "cve": "CVE-2026-69651",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-10-14T17:46:49+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548784"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548784",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548784"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69651"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability"
    },
    {
      "cve": "CVE-2026-70007",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-13T20:57:42.356038+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2551740"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code on the target system over the network. By convincing a user to process specially crafted input, an attacker can trigger memory corruption and compromise the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: .NET Framework Remote Code Execution Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-70007"
        },
        {
          "category": "external",
          "summary": "RHBZ#2551740",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2551740"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-70007",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-70007"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70007",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70007"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70007",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70007"
        }
      ],
      "release_date": "2026-10-13T19:01:15.664000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: .NET Framework Remote Code Execution Vulnerability"
    },
    {
      "cve": "CVE-2026-70035",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-10-13T20:32:46.467618+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2551409"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET. The vulnerability stems from insecure deserialization, where data transmitted over a network is reconstructed without adequate validation. A remote, unauthenticated attacker could exploit this issue by convincing a user to process specially crafted input. Successful exploitation enables the attacker to achieve arbitrary code execution on the target system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: dotnet: arbitrary code execution via untrusted data deserialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-70035"
        },
        {
          "category": "external",
          "summary": "RHBZ#2551409",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2551409"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-70035",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-70035"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70035",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70035"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70035",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70035"
        }
      ],
      "release_date": "2026-10-13T19:01:15.742000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: dotnet: arbitrary code execution via untrusted data deserialization"
    },
    {
      "cve": "CVE-2026-70159",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-14T17:46:49+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548786"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-70159"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548786",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548786"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-70159",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-70159"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70159",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70159"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability"
    },
    {
      "cve": "CVE-2026-70162",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-13T20:55:45.543935+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2551706"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet. The Microsoft Common Object Runtime Library improperly handles incoming web requests. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted web requests to an affected application, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: dotnet: Denial of Service via specially crafted web requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-70162"
        },
        {
          "category": "external",
          "summary": "RHBZ#2551706",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2551706"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-70162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-70162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70162"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162"
        }
      ],
      "release_date": "2026-10-13T19:01:37.471000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet: dotnet: Denial of Service via specially crafted web requests"
    },
    {
      "cve": "CVE-2026-70197",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-13T19:48:55.708672+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2551007"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code over the network. By sending specially crafted input to an affected application, an attacker can corrupt system memory and compromise the host environment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: dotnet: Arbitrary code execution via out-of-bounds write",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-70197"
        },
        {
          "category": "external",
          "summary": "RHBZ#2551007",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2551007"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-70197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-70197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70197"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197"
        }
      ],
      "release_date": "2026-10-13T19:00:26.869000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: dotnet: Arbitrary code execution via out-of-bounds write"
    },
    {
      "cve": "CVE-2026-83520",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-10-13T19:23:11.539459+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2550820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET. An insecure deserialization vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution over a network. By convincing an application or user to process specially crafted serialized data, an attacker can execute malicious commands with the privileges of the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: dotnet: Arbitrary code execution via untrusted data deserialization",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-83520"
        },
        {
          "category": "external",
          "summary": "RHBZ#2550820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2550820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-83520",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-83520"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83520",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83520"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83520",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83520"
        }
      ],
      "release_date": "2026-10-13T19:01:15.820000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: dotnet: Arbitrary code execution via untrusted data deserialization"
    },
    {
      "cve": "CVE-2026-85363",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-10-13T19:43:23.004093+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2550946"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET. An integer overflow issue allows an unauthenticated remote attacker to achieve privilege escalation over the network. By convincing a user to process specially crafted input, an attacker can cause a calculation error that leads to unauthorized access with elevated permissions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: dotnet: Privilege escalation via integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-85363"
        },
        {
          "category": "external",
          "summary": "RHBZ#2550946",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2550946"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-85363",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-85363"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85363",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85363"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85363",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85363"
        }
      ],
      "release_date": "2026-10-13T19:01:15.976000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: dotnet: Privilege escalation via integer overflow"
    },
    {
      "cve": "CVE-2026-87697",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-10-13T20:41:27.656861+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2551475"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet. A remote attacker can achieve arbitrary code execution by tricking an application or user into processing maliciously crafted data during deserialization (the process of reconstructing data into an application object). Successful exploitation allows the attacker to execute unauthorized code over the network within the context of the running application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: dotnet: arbitrary code execution via untrusted data deserialization",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-87697"
        },
        {
          "category": "external",
          "summary": "RHBZ#2551475",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2551475"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-87697",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-87697"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-87697",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87697"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87697",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87697"
        }
      ],
      "release_date": "2026-10-13T19:00:16.019000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: dotnet: arbitrary code execution via untrusted data deserialization"
    },
    {
      "cve": "CVE-2026-96222",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-10-12T16:05:58+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548802"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An improper certificate validation flaw of IMPORTANT severity was found in the .NET System.Security.Cryptography.Xml library as shipped in the dotnet8.0 packages of Red Hat Enterprise Linux 8, 9, and 10, Red Hat In-Vehicle OS, and Red Hat Hardened Images. The KeyInfoX509Data API can accept serialized certificate formats containing attacker-controlled chain metadata instead of requiring a plain X.509 certificate, enabling certificate-forgery and token-spoofing paths. A remote, unauthenticated attacker could exploit this weakness, which Microsoft describes as a spoofing vulnerability in Active Directory Federation Services (AD FS), to forge certificates and spoof signed content or tokens, compromising the confidentiality and integrity of certificate and token validation. Exploitation requires high attack complexity, and the Red Hat CVSS 3.1 score of 7.4 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) matches the upstream assessment. Fixes for the affected Red Hat products are delegated to the upstream .NET correction, which is being pursued for all affected streams.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-96222"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548802",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548802"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-96222",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-96222"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96222",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96222"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability"
    },
    {
      "cve": "CVE-2026-96225",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-10-12T16:05:58+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548803"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Improper link resolution before file access (\u0027link following\u0027) in .NET allows an authorized attacker to elevate privileges locally.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-96225"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548803",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548803"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-96225",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-96225"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96225",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96225"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability"
    },
    {
      "cve": "CVE-2026-96231",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-10-12T16:05:58+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548805"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Improper link resolution before file access (\u0027link following\u0027) in .NET allows an authorized attacker to elevate privileges locally.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-96231"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548805",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548805"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-96231",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-96231"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96231",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96231"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability"
    },
    {
      "cve": "CVE-2026-96233",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-10-12T16:05:58+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548806"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-96233"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548806",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548806"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-96233",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-96233"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96233",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96233"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability"
    },
    {
      "cve": "CVE-2026-96234",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-10-13T19:58:09.179457+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2551106"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET. An origin validation error allows an unauthorized remote attacker to disclose sensitive information over the network. Successful exploitation requires user interaction and enables an attacker to access restricted data without proper authorization.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: .NET Information Disclosure Vulnerability",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-96234"
        },
        {
          "category": "external",
          "summary": "RHBZ#2551106",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2551106"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-96234",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-96234"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96234",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96234"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234"
        }
      ],
      "release_date": "2026-10-13T19:01:16.525000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet: .NET Information Disclosure Vulnerability"
    },
    {
      "cve": "CVE-2026-96237",
      "cwe": {
        "id": "CWE-427",
        "name": "Uncontrolled Search Path Element"
      },
      "discovery_date": "2026-10-12T16:05:58+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548808"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-96237"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548808",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548808"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-96237",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-96237"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96237",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96237"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability"
    },
    {
      "cve": "CVE-2026-96238",
      "cwe": {
        "id": "CWE-427",
        "name": "Uncontrolled Search Path Element"
      },
      "discovery_date": "2026-10-12T16:05:58+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548809"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
          "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-96238"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548809",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548809"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-96238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-96238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96238"
        }
      ],
      "release_date": "2026-10-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T06:12:24+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84693"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64",
            "Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64",
            "Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.