← All advisories

High severity7.8NVD Advisory· Published Jun 9, 2026· Updated Jun 9, 2026

CVE-2026-45490

CVE-2026-45490

Description

Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

Affected products

4

Net/.NETllm-fuzzy
Microsoft/Netllm-fuzzy
osv-coords2 versions
pkg:bitnami/dotnet pkg:bitnami/dotnet-sdk
>= 8.0.0, < 8.0.28+ 1 more
- (no CPE)range: >= 8.0.0, < 8.0.28
- (no CPE)range: >= 8.0.0, < 8.0.28

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45490nvd

News mentions

4

Patch Tuesday - June 2026
Rapid7 Blog · Jun 9, 2026
Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws
BleepingComputer · Jun 9, 2026
Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flaws
BleepingComputer · Jun 9, 2026
Microsoft Patch Tuesday June 2026 – 198 Vulnerabilities Fixed, Including 3 Zero-days
Cyber Security News · Jun 9, 2026