Bug 2551106 (CVE-2026-96234)

Summary: CVE-2026-96234 dotnet: .NET Information Disclosure Vulnerability
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in .NET. An origin validation error allows an unauthorized remote attacker to disclose sensitive information over the network. Successful exploitation requires user interaction and enables an attacker to access restricted data without proper authorization.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-10-13 19:58:32 UTC
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Affected products:
- .NET Windows Desktop Runtime (release 9.0): 9.0.0 - 9.0.20; fixed 9.0.21
- .NET Windows Desktop Runtime (release 10.0): 10.0.0 - 10.0.12; fixed 10.0.13
- .NET Windows Desktop Runtime (release 8.0): 8.0.0 - 8.0.31; fixed 8.0.32
- .NET Windows Desktop Runtime (release 11.0): 11.0.0-preview.1 - 11.0.0-rc.1; fixed 11.0.0-rc.2