Bug 2569206 (CVE-2026-114155)
| Summary: | CVE-2026-114155 dotnet10.0: dotnet11.0: .NET Elevation of Privilege Vulnerability | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Charles Timko <ctimko> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | rhel-process-autobot, security-response-team, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally.
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.
What privileges could an attacker gain by successfully exploiting this vulnerability?
An attacker could execute code with the permissions of another user on the affected system. This could give the attacker access to data and resources available to that user.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Deadline: | 2026-11-10 | ||
|
Description
Charles Timko
2026-11-09 16:04:44 UTC
|