Microsoft.NETCore.App.Runtime.osx-arm64 vulnerabilities
CVEs whose affected-version data names the Microsoft.NETCore.App.Runtime.osx-arm64 package (nuget). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-96233High· 7.5Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
▾ TwilightMicrosoft · Microsoft.NETCore.App.Runtime.linux-armEPSS 0.99%via NVD
CVE-2026-96231High· 7.8Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
▾ TwilightMicrosoft · Microsoft.NETCore.App.Runtime.linux-armEPSS 0.41%via NVD
CVE-2026-96225High· 7.8Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
▾ TwilightMicrosoft · Microsoft.NETCore.App.Runtime.linux-armEPSS 0.41%via NVD
CVE-2026-66822Medium· 5.9Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
▾ SunlitMicrosoft · Microsoft.NETCore.App.Runtime.linux-armEPSS 0.78%via NVD