- Latest release
- 18.11.1 (Nov 10, 2026): affected by CVE-2026-105544
- Newest unaffected release
- 17.1.0 (Feb 16, 2022)
- Advisories
- 2 · 1 high, 1 medium
- Releases
- 202 since 15.0.0 (Feb 23, 2017)
- Registry
- NuGet
- Releases read
- Nov 11, 2026
Version timeline
- GHSA-6856-87HX-P5X7Affects 17.2.0-preview-20220301-01 to 17.3.3 (17.3.4 is outside it); 17.4.0-preview-20220707-01 to 17.8.0 (17.8.1 is outside it); 17.9.0-preview-23503-02 to 17.11.1 (17.11.2 is outside it); 17.12.0 (17.12.1 is outside it); 17.13.0 to 17.14.1 (17.14.2 is outside it); 18.0.0 to 18.0.1 (18.0.2 is outside it); 18.3.0 to 18.7.0 (18.7.1 is outside it); 18.8.0 to 18.10.1 (18.10.2 is outside it); 18.11.0 (18.11.1 is outside it)
- CVE-2026-105544Affects 17.2.0-preview-20220301-01 to 18.11.1 (through the newest release)
Advisories 2
- GHSA-6856-87HX-P5X7Medium
Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability
Affected: from 17.2.0-preview-20220301-01, fixed in 17.3.4; from 17.3.1, fixed in 17.3.4; from 17.3.2, fixed in 17.3.4; from 17.3.3, fixed in 17.3.4; from 17.8.0, fixed in 17.8.1; from 17.11.0, fixed in 17.11.2; from 17.11.1, fixed in 17.11.2; from 17.12.0, fixed in 17.12.1; from 17.14.0, fixed in 17.14.2; from 17.14.1, fixed in 17.14.2; from 18.0.0, fixed in 18.0.2; from 18.0.1, fixed in 18.0.2; from 18.7.0, fixed in 18.7.1; from 18.10.0, fixed in 18.10.2; from 18.10.1, fixed in 18.10.2; from 18.11.0, fixed in 18.11.1; versions 17.4.0; versions 17.4.1; versions 17.5.0; versions 17.6.0; versions 17.6.1; versions 17.6.2; versions 17.6.3; versions 17.7.0; versions 17.7.1; versions 17.7.2; versions 17.9.0; versions 17.10.0; versions 17.13.0; versions 18.3.0; versions 18.4.0; versions 18.5.0; versions 18.5.1; versions 18.6.0; versions 18.8.0; versions 18.8.1; versions 18.9.0; versions 17.4.0-preview-20220707-01; versions 17.4.0-preview-20220726-02; versions 17.4.0-preview-20221003-03; versions 17.4.0-release-20220926-01; versions 17.5.0-preview-20221003-04; versions 17.5.0-preview-20221221-03; versions 17.6.0-preview-20230223-05; versions 17.7.0-preview-23364-03; versions 17.7.0-preview.23280.1; versions 17.8.0-preview-23371-04; versions 17.8.0-preview-23424-02; versions 17.8.0-release-23468-02; versions 17.9.0-preview-23503-02; versions 17.9.0-preview-23531-01; versions 17.9.0-preview-23577-04; versions 17.9.0-release-23619-01; versions 17.10.0-preview-24080-01; versions 17.10.0-release-24177-07; versions 17.11.0-release-24352-06; versions 17.11.0-release-24373-02; versions 17.14.0-preview-25107-01; from 17.3.0, fixed in 17.3.4.
Fixed in 17.3.4 (released Nov 10, 2026, 1 day before disclosure), 17.8.1 (released Nov 10, 2026, 1 day before disclosure), 17.11.2 (released Nov 10, 2026, 1 day before disclosure) and 6 other versions.
The latest release, 18.11.1, is not affected.
- CVE-2026-105544High 7.5
.NET Elevation of Privilege Vulnerability
Affected: from 17.2.0-preview-20220301-01.
No fix released. The latest release, 18.11.1, is still affected.