Skip to content
fr Sign in
6.2 Medium

CVE-2026-45491 Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform…

Description

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

Affected products and versions

Product Affected versions Fixed in
.NET 10.0 10.0 10.0.0 → < 10.0.9 10.0.9
.NET 8.0 8.0 8.0.0 → < 8.0.28 8.0.28
.NET 9.0 9.0 9.0.0 → < 9.0.17 9.0.17

References

Timeline

  1. Published
  2. Last modified

Other CVEs of .NET 10.0

The 70 CVEs of .NET 10.0 →
CVE-2026-105016 Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network 9.8 Critical CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network 7.5 High CVE-2026-96957 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature… 8.8 High CVE-2026-96235 Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network 8.8 High
Track this CVE