.NET Aspire
by Microsoft
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-120006 | Hig | 0.49 | 7.5 | — | Nov 10, 2026 | Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-120792 | Hig | 0.47 | 7.3 | — | Nov 10, 2026 | Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information locally. | ||
| CVE-2026-120778 | Hig | 0.47 | 7.3 | — | Nov 10, 2026 | Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally. |
- risk 0.49cvss 7.5epss —
Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally.
- risk 0.47cvss 7.3epss —
Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information locally.
- risk 0.47cvss 7.3epss —
Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.