CVE record · 2 sources
CVE-2026-114150
CVSS 5.9Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
- Vendor
- Microsoft
- Product
- .NET 11.0 installed on Linux, .NET 11.0 installed on Mac OS, .NET 11.0 installed on Windows, Microsoft Visual Studio 2026 version 18.12
- CVSS v3.1
- 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weakness
- CWE-908
- Exposure class
- Developer platform
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
ASP.NET Core Information Disclosure Vulnerability
Changes made to the security updates links and information. This is an informational change only.
-
Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.