Описание
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | released | 10.0.107-10.0.7-0ubuntu1~26.04.1 |
| focal | DNE | |
| jammy | DNE | |
| noble | released | 10.0.107-10.0.7-0ubuntu1~24.04.1 |
| questing | released | 10.0.107-10.0.7-0ubuntu1~25.10.1 |
| resolute | released | 10.0.107-10.0.7-0ubuntu1~26.04.1 |
| trusty | DNE | |
| upstream | released | 10.0.7 |
| xenial | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| focal | DNE | |
| jammy | not-affected | |
| noble | DNE | |
| questing | DNE | |
| trusty | DNE | |
| upstream | needs-triage | |
| xenial | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| focal | DNE | |
| jammy | ignored | see notes |
| noble | DNE | |
| questing | DNE | |
| trusty | DNE | |
| upstream | needs-triage | |
| xenial | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| focal | DNE | |
| jammy | not-affected | |
| noble | not-affected | |
| questing | not-affected | |
| trusty | DNE | |
| upstream | needs-triage | |
| xenial | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| questing | not-affected | |
| trusty | DNE | |
| upstream | needs-triage | |
| xenial | DNE |
Показывать по
Ссылки на источники
EPSS
9.1 Critical
CVSS3
Связанные уязвимости
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege
Уязвимость программной платформы ASP.NET Core, связанная с ошибками проверки криптографической подписи, позволяющая нарушителю повысить свои привилегии
EPSS
9.1 Critical
CVSS3