CVE-2026-109481

Vendor

Microsoft

Product

.NET 11.0 installed on Linux, .NET 11.0 installed on Mac OS, .NET 11.0 installed on Windows, Microsoft Visual Studio 2026 version 18.12

CVSS v3.1

7.5 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness

CWE-352

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   CVE NVD 2h ago

   Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

   Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

   CVSS 7.5 CVE-2026-109481 Microsoft
2. 40
   Advisory MSRC 5h ago

   ASP.NET Core Elevation of Privilege Vulnerability

   Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

   CVE-2026-109481 Microsoft