.NET Elevation of Privilege Vulnerability
Published Aug 11, 2026
7.8
HIGHCVSS 3.1
EPSS 0.47%
Description
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
Affected products
-
Affected
- ≥ 4.151.2, < 4.151.2
Configuration 1
Configuration 2
No data.
Red Hat Enterprise Linux 10
dotnet10.0
Not affected
Red Hat Enterprise Linux 10
dotnet11.0
Not affected
Red Hat Enterprise Linux 10
dotnet8.0
Not affected
Red Hat Enterprise Linux 10
dotnet9.0
Not affected
Red Hat Enterprise Linux 8
dotnet/sdk
Not affected
Red Hat Enterprise Linux 8
dotnet10.0
Not affected
Red Hat Enterprise Linux 8
dotnet8.0
Not affected
Red Hat Enterprise Linux 8
dotnet9.0
Not affected
Red Hat Enterprise Linux 9
dotnet/sdk
Not affected
Red Hat Enterprise Linux 9
dotnet10.0
Not affected
Red Hat Enterprise Linux 9
dotnet11.0
Not affected
Red Hat Enterprise Linux 9
dotnet6.0
Not affected
Red Hat Enterprise Linux 9
dotnet7.0
Not affected
Red Hat Enterprise Linux 9
dotnet8.0
Not affected
Red Hat Enterprise Linux 9
dotnet9.0
Not affected
Red Hat Hardened Images
dotnet10.0
Not affected
Red Hat Hardened Images
dotnet8.0
Not affected
Red Hat Hardened Images
dotnet9.0
Not affected
Red Hat OpenShift Dev Spaces
devspaces/udi-rhel9
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | dotnet10.0 | Not affected | n/a |
| Red Hat Enterprise Linux 10 | dotnet11.0 | Not affected | n/a |
| Red Hat Enterprise Linux 10 | dotnet8.0 | Not affected | n/a |
| Red Hat Enterprise Linux 10 | dotnet9.0 | Not affected | n/a |
| Red Hat Enterprise Linux 8 | dotnet/sdk | Not affected | n/a |
| Red Hat Enterprise Linux 8 | dotnet10.0 | Not affected | n/a |
| Red Hat Enterprise Linux 8 | dotnet8.0 | Not affected | n/a |
| Red Hat Enterprise Linux 8 | dotnet9.0 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | dotnet/sdk | Not affected | n/a |
| Red Hat Enterprise Linux 9 | dotnet10.0 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | dotnet11.0 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | dotnet6.0 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | dotnet7.0 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | dotnet8.0 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | dotnet9.0 | Not affected | n/a |
| Red Hat Hardened Images | dotnet10.0 | Not affected | n/a |
| Red Hat Hardened Images | dotnet8.0 | Not affected | n/a |
| Red Hat Hardened Images | dotnet9.0 | Not affected | n/a |
| Red Hat OpenShift Dev Spaces | devspaces/udi-rhel9 | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat's .NET packages ship versions 8.0.130, 9.0.119, and 10.0.111, which are at or above the fixed versions (8.0.30, 9.0.19, and 10.0.11 respectively) for CVE-2026-58641. The integer overflow or wraparound vulnerability allowing local privilege escalation has been patched in all Red Hat .NET builds.
Red Hat mitigation
No mitigation is required. Red Hat's currently shipped .NET versions are not vulnerable to CVE-2026-58641.
References (6)
- https://access.redhat.com/security/cve/CVE-2026-58641 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2514196 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56606 Advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58641 vendor-advisorypatchVendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-58641
- https://www.cve.org/CVERecord?id=CVE-2026-58641
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2026-58641 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2514196 | Issue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56606 | Advisory | |
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58641 | vendor-advisorypatchVendor Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2026-58641 | ||
| https://www.cve.org/CVERecord?id=CVE-2026-58641 |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub
No data