CVE-2026-114157

Vendor

Microsoft

Product

.NET 10.0 installed on Windows, .NET 11.0 installed on Windows, .NET 8.0 installed on Windows, .NET 9.0 installed on Windows

CVSS v3.1

7.5 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Weakness

CWE-362

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   Advisory MSRC 2h ago

   ASP.NET Core Security Feature Bypass Vulnerability

   Changes made to the security updates links and information. This is an informational change only.

   CVE-2026-114157 Microsoft
2. 39
   CVE NVD 23h ago

   Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate…

   Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.

   CVSS 7.5 CVE-2026-114157 Microsoft