Описание
.NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
FAQ
How could an attacker exploit this vulnerability?
An attacker could provide a specially crafted application that references an unsigned NuGet package. If a user restores or runs the application on an affected Linux system, signature verification might not be enforced, allowing untrusted package content to be installed or executed.
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this vulnerability could bypass required NuGet package signature verification on affected Linux systems. This could allow an unsigned package to be accepted when signature validation is required by policy.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.14 | ||
| .NET 10.0 installed on Windows | ||
| .NET 10.0 installed on Mac OS | ||
| .NET 10.0 installed on Linux | ||
| .NET 11.0 installed on Windows | ||
| .NET 11.0 installed on Mac OS | ||
| .NET 11.0 installed on Linux | ||
| Microsoft Visual Studio 2026 version 18.10 |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
8.8 High
CVSS3
Связанные уязвимости
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
EPSS
8.8 High
CVSS3