Skip to main content
cve.nowby Sazabi
← Vulnerabilities
GHSA-P3JP-9V83-76W9VulnerabilityPublished

Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability

Written by anthropic/claude-haiku-5.5 from the sources below. Verify against them.

—high
Exploited
No known exploitation
Fix
Fixed in 8.0.33, 9.0.22, 10.0.14, 11.0.0-rc.3.26522.148
Who is exposed
Not reported

Do first: Upgrade to a fixed version: 8.0.33, 9.0.22, 10.0.14, 11.0.0-rc.3.26522.148.

17Pcve.now Index 17 of 100 · methodology v3 · provisional
  • Exploitation?/40Exploitation: unknown (data gap). No CISA SSVC exploitation rating yet
  • Exposure?/25Exposure: unknown (data gap). No advisory context yet
  • Reach10/20Affects NuGet packages
  • Severity7/10Rated high by ghsa
  • No patch0/5No signal

What would change the score

  • Would score about 72 if added to CISA KEV
  • Would score about 67 if CISA's SSVC rates exploitation active
  • Would score about 39 if advisories confirm default setups are exposed

How the score works · Leaderboard

GHSA-P3JP-9V83-76W9 is not in CISA's Known Exploited Vulnerabilities (KEV) catalog. No public exploit code is tracked. It is rated high by ghsa and affects Microsoft.DotNet.ILCompiler, Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64, Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64 and 74 more; fixed in 8.0.33, 9.0.22, 10.0.14 and 1 more.

Published
Last modified
Published
Not listed in CISA KEV
17/100 · provisional
High (ghsa)
Fix
Fixed in 8.0.33, 9.0.22, 10.0.14, 11.0.0-rc.3.26522.148
None on Exploit-DB, Metasploit or GitHub

Summary

The Brotli decompression library used by .NET (affecting .NET applications that enable Brotli decompression in ASP.NET Core, HttpClient, or call Brotli decompression APIs directly on attacker-controlled data) contains a buffer overflow that could let an unauthenticated attacker read or corrupt process memory, potentially causing information disclosure, denial of service, or elevation of privilege. Applications that do not enable these Brotli decompression paths, and .NET Framework, are not affected.

Read the original description

Executive summary A buffer overflow vulnerability exists in the Brotli decompression library used by .NET. This vulnerability may allow an unauthenticated attacker to read or corrupt process memory. This could lead to information disclosure, denial of service, or elevation of privilege. ASP.NET Core and HttpClient do not automatically decompress Brotli data in their default configurations. Applications are exposed when they enable Brotli decompression or explicitly use Brotli decompression APIs to process attacker-controlled data, as described below. .NET Framework is not affected. Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/494 CVSS Details • Version: 3.1 • Severity: High • Score: 8.1 • Vector: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C` • Weakness: CWE-787 (Out-of-bounds Write) Affected Platforms • Platforms: All • Architectures: All Mitigations ASP.NET Core request decompression and HttpClient automatic response decompression are not enabled by default. An application is not exposed merely because an affected .NET package is installed. Exposure requires the application to decompress attacker-controlled Brotli data through one of these paths: • Enable ASP.NET Core automatic request decompression with Brotli (`br`) support. • Enable HttpClient automatic response decompression by configuring HttpClientHandler.AutomaticDecompression or SocketsHttpHandler.AutomaticDecompression to include DecompressionMethods.Brotli or `DecompressionMethods.All`. • Explicitly use Brotli decompression APIs in `System.IO.Compression`, such as `BrotliStream` or `BrotliDecoder`. Until the update can be deployed, avoid decompressing attacker-controlled Brotli data. The following examples show how to disable Brotli decompression if you are already using it. > Warning: Do not use these code snippets if you are not already using decompression. Do not introduce a call to `AddRequestDecompression` if your application does not already call it. Similarly, do not introduce an `AutomaticDecompression` property assignment if your application does not already set that property. Modify only your existing decompression configuration. Enabling automatic decompression can introduce denial-of-service risks even when Brotli is excluded. If you are already using Brotli request decompression in ASP.NET Core, exclude it by removing the `br` entry from your existing decompression configuration. This retains the default gzip and deflate providers: ```csharp builder.Services.AddRequestDecompression(options => { options.DecompressionProviders.Remove("br"); }); ``` If your application already enables HttpClient automatic response decompression, disable Brotli by updating the flags on your existing handler so they do not include `DecompressionMethods.Brotli`: ```csharp var handler = new HttpClientHandler { AutomaticDecompression = DecompressionMethods.GZip | DecompressionMethods.Deflate }; var httpClient = new HttpClient(handler); ``` Applications that directly use Brotli decompression APIs must stop passing untrusted Brotli data to those APIs until updated. Ensure that other application code does not continue to decompress the same untrusted Brotli data. These changes can affect normal request and response handling and should be tested before deployment. Installing the security update remains the recommended fix. <a name="affected-packages"></a>Affected Packages The vulnerability affects .NET applications using an affected Brotli decoder in the runtime or NativeAOT packages listed below. .NET 8 Package name | Affected version | Patched version ------------ | ---------------- | --------------- Microsoft.DotNet.ILCompiler | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.android-arm | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.android-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.android-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.android-x86 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.browser-wasm | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.ios-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.linux-arm | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.linux-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.linux-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.osx-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.osx-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.wasi-wasm | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.win-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.Mono.win-x86 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.linux-arm | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.linux-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.linux-bionic-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.linux-bionic-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.linux-musl-arm | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.linux-musl-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.linux-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.osx-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.osx-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.win-arm64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.win-x64 | >= 8.0.0, < 8.0.33 | 8.0.33 Microsoft.NETCore.App.Runtime.win-x86 | >= 8.0.0, < 8.0.33 | 8.0.33 .NET 9 Package name | Affected version | Patched version ------------ | ---------------- | --------------- Microsoft.DotNet.ILCompiler | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.win-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.NativeAOT.win-x86 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.android-arm | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.android-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.android-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.android-x86 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.browser-wasm | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.ios-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.Mono.wasi-wasm | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.linux-arm | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.linux-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.linux-bionic-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.linux-bionic-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.linux-musl-arm | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.linux-musl-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.linux-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.osx-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.osx-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.win-arm64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.win-x64 | >= 9.0.0, < 9.0.22 | 9.0.22 Microsoft.NETCore.App.Runtime.win-x86 | >= 9.0.0, < 9.0.22 | 9.0.22 .NET 10 Package name | Affected version | Patched version ------------ | ---------------- | --------------- Microsoft.DotNet.ILCompiler | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.android-arm | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.android-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.android-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.win-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.NativeAOT.win-x86 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.android-arm | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.android-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.android-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.android-x86 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.browser-wasm | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.ios-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.Mono.wasi-wasm | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.android-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.android-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.linux-arm | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.linux-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.linux-bionic-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.linux-bionic-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.linux-musl-arm | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.linux-musl-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.linux-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.osx-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.osx-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.win-arm64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.win-x64 | >= 10.0.0, < 10.0.14 | 10.0.14 Microsoft.NETCore.App.Runtime.win-x86 | >= 10.0.0, < 10.0.14 | 10.0.14 .NET 11 previews Package name | Affected version | Patched version ------------ | ---------------- | --------------- Microsoft.DotNet.ILCompiler | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.android-arm | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.android-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.android-x64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.win-x64 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.NativeAOT.win-x86 | >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.android-arm | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.android-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.android-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.android-x86 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.browser-wasm | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.ios-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.Mono.wasi-wasm | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.android-arm | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.android-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.android-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.browser-wasm | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.ios-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.iossimulator-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.iossimulator-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.linux-arm | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.linux-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.linux-bionic-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.linux-bionic-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.linux-musl-arm | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.linux-musl-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.linux-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.maccatalyst-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.maccatalyst-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.osx-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.osx-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.tvos-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.tvossimulator-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.tvossimulator-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.win-arm64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.win-x64 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Microsoft.NETCore.App.Runtime.win-x86 | >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 | 11.0.0-rc.3.26522.148 Advisory FAQ <a name="how-affected"></a>How do I know if I am affected? You are affected if your application uses an affected Brotli decoder included in a package listed in affected packages, including a decoder linked into a NativeAOT application, to decompress attacker-controlled data. See mitigations for the affected usage paths and default settings. <a name="how-fix"></a>How do I fix the issue? Install the updated runtime or SDK for the .NET version used by your application. If your application directly references an affected package, update that reference to the patched version listed above. .NET release | Runtime | SDK versions ------------ | ------- | ------------ .NET 8 | 8.0.33 | 8.0.133, 8.0.427 .NET 9 | 9.0.22 | 9.0.123, 9.0.320 .NET 10 | 10.0.14 | 10.0.114, 10.0.403 .NET 11 previews | 11.0.0-rc.3.26522.148 | 11.0.100-rc.3.26522.148 Download .NET from https://dotnet.microsoft.com/download/dotnet. Once you have installed the updated runtime or SDK, restart your apps for the update to take effect. If you have deployed self-contained applications, rebuild and redeploy those applications with the updated runtime. For NativeAOT applications, update the SDK and any explicit compiler or runtime-pack references to patched versions, then republish and redeploy the application. Updating the machine's shared runtime alone does not replace a decoder already linked into a NativeAOT executable. Other Information Reporting Security Issues If you have found a potential security issue in a supported version of .NET, please report it to the Microsoft Security Response Center (MSRC) via the MSRC Researcher Portal. Further information can be found in the MSRC Report an Issue FAQ. Security reports made through MSRC may qualify for the Microsoft .NET Bounty. Details of the Microsoft .NET Bounty Program including terms and conditions are at https://aka.ms/corebounty. Support You can ask questions about this issue on GitHub in the .NET GitHub organization. The main repos are located at https://github.com/dotnet/runtime. The Announcements repo (https://github.com/dotnet/Announcements) will contain this bulletin as an issue and will include a link to a discussion issue. You can ask questions in the linked discussion issue. Disclaimer The information provided in this advisory is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. External Links CVE-2026-111497 Revisions V1.0 (10/25/2026): Initial advisory.

What to do

  • Upgrade to a fixed version: 8.0.33, 9.0.22, 10.0.14, 11.0.0-rc.3.26522.148.

Timeline

  1. Advisory published
  2. Record last updated
  3. First seen by cve.now

Affected versions

  • Microsoft.DotNet.ILCompilerNuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64NuGet

    From 8.0.0 · fixed in 8.0.33

Show all 225 packagesShow fewer packages
  • Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.android-armNuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.android-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.android-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.android-x86NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.browser-wasmNuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.ios-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.linux-armNuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.linux-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.linux-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasmNuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.osx-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.osx-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.tvos-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.wasi-wasmNuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.win-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.Mono.win-x86NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.linux-armNuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.linux-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.linux-bionic-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.linux-bionic-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.linux-musl-armNuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.linux-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.osx-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.osx-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.win-arm64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.win-x64NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.NETCore.App.Runtime.win-x86NuGet

    From 8.0.0 · fixed in 8.0.33

  • Microsoft.DotNet.ILCompilerNuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-armNuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-armNuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-armNuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.win-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.NativeAOT.win-x86NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.android-armNuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.android-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.android-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.android-x86NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.browser-wasmNuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.ios-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasmNuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.tvos-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.Mono.wasi-wasmNuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.linux-armNuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.linux-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.linux-bionic-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.linux-bionic-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.linux-musl-armNuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.linux-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.osx-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.osx-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.win-arm64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.win-x64NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.NETCore.App.Runtime.win-x86NuGet

    From 9.0.0 · fixed in 9.0.22

  • Microsoft.DotNet.ILCompilerNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.android-armNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.android-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.android-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-armNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-armNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-armNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.win-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.NativeAOT.win-x86NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.android-armNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.android-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.android-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.android-x86NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.browser-wasmNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.ios-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasmNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.tvos-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.Mono.wasi-wasmNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.android-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.android-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.linux-armNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.linux-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.linux-bionic-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.linux-bionic-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.linux-musl-armNuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.linux-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.osx-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.osx-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.win-arm64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.win-x64NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.NETCore.App.Runtime.win-x86NuGet

    From 10.0.0 · fixed in 10.0.14

  • Microsoft.DotNet.ILCompilerNuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.android-armNuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.android-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.android-x64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-armNuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-armNuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-armNuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.win-x64NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.NativeAOT.win-x86NuGet

    From 11.0.0-preview.1.26104.118 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.android-armNuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.android-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.android-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.android-x86NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.browser-wasmNuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.ios-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasmNuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.tvos-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.Mono.wasi-wasmNuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.android-armNuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.android-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.android-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.browser-wasmNuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.ios-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.iossimulator-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.iossimulator-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.linux-armNuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.linux-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.linux-bionic-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.linux-bionic-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.linux-musl-armNuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.linux-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.maccatalyst-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.maccatalyst-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.osx-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.osx-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.tvos-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.tvossimulator-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.tvossimulator-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.win-arm64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.win-x64NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

  • Microsoft.NETCore.App.Runtime.win-x86NuGet

    From 11.0.0-preview.1 · fixed in 11.0.0-rc.3.26522.148

Evidence 6

  1. Advisory
  2. Repository
  3. Repository
  4. Repository
  5. Repository
  6. Repository

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.

FAQ

Questions about GHSA-P3JP-9V83-76W9

Is GHSA-P3JP-9V83-76W9 being exploited?

It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. No public exploit code is tracked.Source: cve.now feed data

Which versions are affected by GHSA-P3JP-9V83-76W9?

Microsoft.DotNet.ILCompiler (NuGet): from 8.0.0 before 8.0.33. Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64 (NuGet): from 8.0.0 before 8.0.33. Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64 (NuGet): from 8.0.0 before 8.0.33. Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64 (NuGet): from 8.0.0 before 8.0.33. Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64 (NuGet): from 8.0.0 before 8.0.33. 220 more packages are listed on the page.Source: cve.now feed data

How do I fix GHSA-P3JP-9V83-76W9?

Upgrade to a fixed version: 8.0.33, 9.0.22, 10.0.14, 11.0.0-rc.3.26522.148.Source: cve.now feed data

Sources

More vulnerabilities