CVE-2026-96231 | Mend Vulnerability Database

Vulnerability DatabaseCVE-2026-96231

CVE-2026-96231

Published:October 13, 2026

Updated:October 14, 2026

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Affected Packages

microsoft.netcore.app.runtime.osx-arm64 (DOT_NET):

Affected version(s) >=10.0.0-preview.2.25163.2 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-musl-arm (DOT_NET):

Affected version(s) >=10.0.0-preview.2.25163.2 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-musl-x64 (DOT_NET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-musl-arm (DOT_NET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-arm64 (DOT_NET):

Affected version(s) >=10.0.0-preview.2.25163.2 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.osx-x64 (DOT_NET):

Affected version(s) >=10.0.0-preview.2.25163.2 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-musl-x64 (DOT_NET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-musl-x64 (DOT_NET):

Affected version(s) >=10.0.0-preview.2.25163.2 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-arm (DOT_NET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-arm64 (DOT_NET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.osx-arm64 (DOT_NET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-arm64 (DOT_NET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-arm (DOT_NET):

Affected version(s) >=10.0.0-preview.2.25163.2 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-musl-arm64 (DOT_NET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-musl-arm64 (DOT_NET):

Affected version(s) >=10.0.0-preview.2.25163.2 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-musl-arm64 (DOT_NET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-arm (DOT_NET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-musl-arm (DOT_NET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.osx-arm64 (DOT_NET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-x64 (DOT_NET):

Affected version(s) >=10.0.0-preview.2.25163.2 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.osx-x64 (DOT_NET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.osx-x64 (DOT_NET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-x64 (DOT_NET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-x64 (DOT_NET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-musl-x64 (NUGET):

Affected version(s) >=10.0.0 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-x64 (NUGET):

Affected version(s) >=10.0.0 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-arm (NUGET):

Affected version(s) >=10.0.0 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.osx-arm64 (NUGET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-x64 (NUGET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.osx-x64 (NUGET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-musl-arm (NUGET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-musl-arm64 (NUGET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.osx-x64 (NUGET):

Affected version(s) >=10.0.0 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-arm64 (NUGET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-musl-x64 (NUGET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-arm64 (NUGET):

Affected version(s) >=10.0.0 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-musl-x64 (NUGET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-musl-arm64 (NUGET):

Affected version(s) >=10.0.0 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-arm (NUGET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.osx-x64 (NUGET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-arm64 (NUGET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-x64 (NUGET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-arm (NUGET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.osx-arm64 (NUGET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.linux-musl-arm (NUGET):

Affected version(s) >=9.0.0 <9.0.21

Fix Suggestion:

Update to version 9.0.21

microsoft.netcore.app.runtime.linux-musl-arm64 (NUGET):

Affected version(s) >=8.0.0 <8.0.32

Fix Suggestion:

Update to version 8.0.32

microsoft.netcore.app.runtime.osx-arm64 (NUGET):

Affected version(s) >=10.0.0 <10.0.13

Fix Suggestion:

Update to version 10.0.13

microsoft.netcore.app.runtime.linux-musl-arm (NUGET):

Affected version(s) >=10.0.0 <10.0.13

Fix Suggestion:

Update to version 10.0.13

Related Resources (6)

https://github.com/dotnet/runtime

https://github.com/dotnet/announcements/issues/479

https://github.com/dotnet/runtime/issues/135707

https://nvd.nist.gov/vuln/detail/CVE-2026-96231

https://github.com/dotnet/runtime/security/advisories/GHSA-2j93-m82w-73j2

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231

Do you need more information?

CVSS v4

Base Score:

8.5

Attack Vector

LOCAL

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

LOW

User Interaction

NONE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

HIGH

Vulnerable System Availability

HIGH

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Exploit Maturity

UNPROVEN

Weakness Type (CWE)

Improper Link Resolution Before File Access ('Link Following')

CWE-59

AI app security

Mend AI

Application security

Mend AppSec

Dependency management

Mend Renovate

Expand coverage

Runtime and beyond

AI security

Code security

Supply chain security

Compliance & reporting

vs. AI security tools

vs. AppSec tools

Buyer’s guides

About Mend.io

Partners & people

Customers

Learn & explore

Guides

Developers hub