p PatchFirst

CVE-2026-70183

CVE-2026-70183 · ASP.NET Core Elevation of Privilege Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

CVSS 7.5 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • asp.net core 10.0

    Versions
    • ≥ 10.0, < 10.0.13: Affected (custom)

    Update to 10.0.13

  • asp.net core 11.0

    Versions
    • ≥ 11.0, < 11.0.0-rc.2: Affected (custom)

    No fix published

  • asp.net core 8.0

    Versions
    • ≥ 8.0, < 8.0.32: Affected (custom)

    Update to 8.0.32

  • asp.net core 9.0

    Versions
    • ≥ 9.0, < 9.0.21: Affected (custom)

    Update to 9.0.21

  • microsoft visual studio 2022 version 17.14

    Versions
    • ≥ 17.14.0, < 17.14.42: Affected (custom)

    Update to 17.14.42

  • microsoft visual studio 2026 version 18.10

    Versions
    • ≥ 18.10.0, < 18.10.4: Affected (custom)

    Update to 18.10.4

  • dotnet6 Ubuntu:22.04:LTS

    Versions
    • 6.0.108-0ubuntu1~22.04.1
    • 6.0.109-0ubuntu1~22.04.1
    • 6.0.110-0ubuntu1~22.04.1
    • 6.0.111-0ubuntu1~22.04.1
    • 6.0.113-0ubuntu1~22.04.1
    • 6.0.116-0ubuntu1~22.04.1
    • 6.0.118-0ubuntu1~22.04.1
    • 6.0.119-0ubuntu1~22.04.1
    • 6.0.120-0ubuntu1~22.04.1
    • 6.0.121-0ubuntu1~22.04.1
    • 6.0.122-0ubuntu1~22.04.1
    • 6.0.123-0ubuntu1~22.04.1
    • 6.0.124-0ubuntu1~22.04.1
    • 6.0.125-0ubuntu1~22.04.1
    • 6.0.126-0ubuntu1~22.04.1
    • 6.0.127-0ubuntu1~22.04.1
    • 6.0.128-0ubuntu1~22.04.2
    • 6.0.132-0ubuntu1~22.04.1
    • 6.0.133-0ubuntu1~22.04.1
    • 6.0.135-0ubuntu1~22.04.1
    • 6.0.136-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    • 7.0.109-0ubuntu1~22.04.1
    • 7.0.110-0ubuntu1~22.04.1
    • 7.0.111-0ubuntu1~22.04.1
    • 7.0.112-0ubuntu1~22.04.1
    • 7.0.113-0ubuntu1~22.04.1
    • 7.0.114-0ubuntu1~22.04.1
    • 7.0.115-0ubuntu1~22.04.1
    • 7.0.116-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.2
    • 7.0.119-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • dotnet8 Ubuntu:22.04:LTS

    Versions
    • 8.0.102-8.0.2-0ubuntu1~22.04.1
    • 8.0.103-8.0.3-0ubuntu1~22.04.1
    • 8.0.103-8.0.3-0ubuntu1~22.04.2
    • 8.0.105-8.0.5-0ubuntu1~22.04.1
    • 8.0.107-8.0.7-0ubuntu1~22.04.1
    • 8.0.108-8.0.8-0ubuntu1~22.04.1
    • 8.0.110-8.0.10-0ubuntu1~22.04.1
    • 8.0.111-8.0.11-0ubuntu1~22.04.1
    • 8.0.112-8.0.12-0ubuntu1~22.04.1
    • 8.0.114-8.0.14-0ubuntu1~22.04.1
    • 8.0.115-8.0.15-0ubuntu1~22.04.1
    • 8.0.116-8.0.16-0ubuntu1~22.04.1
    • 8.0.117-8.0.17-0ubuntu1~22.04.1
    • 8.0.118-8.0.18-0ubuntu1~22.04.1
    • 8.0.119-8.0.19-0ubuntu1~22.04.1
    • 8.0.120-8.0.20-0ubuntu1~22.04.1
    • 8.0.121-8.0.21-0ubuntu1~22.04.1
    • 8.0.122-8.0.22-0ubuntu1~22.04.1
    • 8.0.123-8.0.23-0ubuntu1~22.04.1
    • 8.0.124-8.0.24-0ubuntu1~22.04.1
    • 8.0.125-8.0.25-0ubuntu1~22.04.1
    • 8.0.126-8.0.26-0ubuntu1~22.04.1
    • 8.0.127-8.0.27-0ubuntu1~22.04.1
    • 8.0.128-8.0.28-0ubuntu1~22.04.1
    • 8.0.129-8.0.29-0ubuntu1~22.04.1
    • 8.0.130-8.0.30-0ubuntu1~22.04.1
    • 8.0.131-8.0.31-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 8.0.132-8.0.32-0ubuntu1~22.04.1

    Update to 8.0.132-8.0.32-0ubuntu1~22.04.1

  • dotnet10 Ubuntu:24.04:LTS

    Versions
    • 10.0.100-10.0.0-0ubuntu1~24.04.1
    • 10.0.101-10.0.1-0ubuntu1~24.04.2
    • 10.0.103-10.0.3-0ubuntu1~24.04.1
    • 10.0.104-10.0.4-0ubuntu1~24.04.1
    • 10.0.105-10.0.5-0ubuntu1~24.04.1
    • 10.0.106-10.0.6-0ubuntu1~24.04.1
    • 10.0.107-10.0.7-0ubuntu1~24.04.1
    • 10.0.108-10.0.8-0ubuntu1~24.04.1
    • 10.0.109-10.0.9-0ubuntu1~24.04.1
    • 10.0.110-10.0.10-0ubuntu1~24.04.1
    • 10.0.111-10.0.11-0ubuntu1~24.04.1
    • 10.0.112-10.0.12-0ubuntu1~24.04.1
    Affected ranges
    • ECOSYSTEM: < 10.0.113-10.0.13-0ubuntu1~24.04.1

    Update to 10.0.113-10.0.13-0ubuntu1~24.04.1

  • dotnet8 Ubuntu:24.04:LTS

    Versions
    • 8.0.100-8.0.0~rc1-0ubuntu1
    • 8.0.100-8.0.0~rc2-0ubuntu1
    • 8.0.100-8.0.0~rc2-0ubuntu2
    • 8.0.100-8.0.0-0ubuntu1
    • 8.0.100-8.0.0-0ubuntu2
    • 8.0.101-8.0.1-0ubuntu1
    • 8.0.101-8.0.1-0ubuntu2
    • 8.0.102-8.0.2-0ubuntu1
    • 8.0.103-8.0.3-0ubuntu2
    • 8.0.103-8.0.3-0ubuntu3
    • 8.0.104-8.0.4-0ubuntu1
    • 8.0.105-8.0.5-0ubuntu1~24.04.1
    • 8.0.107-8.0.7-0ubuntu1~24.04.1
    • 8.0.108-8.0.8-0ubuntu1~24.04.1
    • 8.0.108-8.0.8-0ubuntu1~24.04.2
    • 8.0.110-8.0.10-0ubuntu1~24.04.1
    • 8.0.111-8.0.11-0ubuntu1~24.04.1
    • 8.0.112-8.0.12-0ubuntu1~24.04.1
    • 8.0.114-8.0.14-0ubuntu1~24.04.1
    • 8.0.115-8.0.15-0ubuntu1~24.04.1
    • 8.0.116-8.0.16-0ubuntu1~24.04.1
    • 8.0.117-8.0.17-0ubuntu1~24.04.1
    • 8.0.118-8.0.18-0ubuntu1~24.04.1
    • 8.0.119-8.0.19-0ubuntu1~24.04.1
    • 8.0.120-8.0.20-0ubuntu1~24.04.1
    • 8.0.121-8.0.21-0ubuntu1~24.04.1
    • 8.0.122-8.0.22-0ubuntu1~24.04.1
    • 8.0.123-8.0.23-0ubuntu1~24.04.1
    • 8.0.124-8.0.24-0ubuntu1~24.04.1
    • 8.0.125-8.0.25-0ubuntu1~24.04.1
    • 8.0.126-8.0.26-0ubuntu1~24.04.1
    • 8.0.127-8.0.27-0ubuntu1~24.04.1
    • 8.0.128-8.0.28-0ubuntu1~24.04.1
    • 8.0.129-8.0.29-0ubuntu1~24.04.1
    • 8.0.130-8.0.30-0ubuntu1~24.04.1
    • 8.0.131-8.0.31-0ubuntu1~24.04.1
    Affected ranges
    • ECOSYSTEM: < 8.0.132-8.0.32-0ubuntu1~24.04.1

    Update to 8.0.132-8.0.32-0ubuntu1~24.04.1

  • dotnet10 Ubuntu:26.10

    Versions
    • 10.0.105-10.0.5-0ubuntu1
    • 10.0.107-10.0.7-0ubuntu1~26.04.1
    • 10.0.108-10.0.8-0ubuntu1
    • 10.0.109-10.0.9-0ubuntu1
    • 10.0.110-10.0.10-0ubuntu3
    • 10.0.111-10.0.11-0ubuntu1
    • 10.0.112-10.0.12-0ubuntu1
    • 10.0.112-10.0.12-0ubuntu2
    Affected ranges
    • ECOSYSTEM: < 10.0.113-10.0.13-0ubuntu1~26.10.1

    Update to 10.0.113-10.0.13-0ubuntu1~26.10.1

  • dotnet11 Ubuntu:26.10

    Versions
    • 11.0.100-11.0.0~rc1-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1

    Update to 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1

  • dotnet10 Ubuntu:26.04:LTS

    Versions
    • 10.0.100-10.0.0~rc1-0ubuntu1
    • 10.0.100-10.0.0~rc2-0ubuntu1
    • 10.0.100-10.0.0-0ubuntu1
    • 10.0.100-10.0.0-0ubuntu2
    • 10.0.101-10.0.1-0ubuntu1
    • 10.0.101-10.0.1-0ubuntu2
    • 10.0.101-10.0.1-0ubuntu3
    • 10.0.102-10.0.2-0ubuntu1
    • 10.0.103-10.0.3-0ubuntu1
    • 10.0.104-10.0.4-0ubuntu1
    • 10.0.105-10.0.5-0ubuntu1
    • 10.0.107-10.0.7-0ubuntu1~26.04.1
    • 10.0.108-10.0.8-0ubuntu1~26.04.1
    • 10.0.109-10.0.9-0ubuntu1~26.04.1
    • 10.0.110-10.0.10-0ubuntu1~26.04.1
    • 10.0.111-10.0.11-0ubuntu1~26.04.1
    • 10.0.112-10.0.12-0ubuntu1~26.04.1
    Affected ranges
    • ECOSYSTEM: < 10.0.113-10.0.13-0ubuntu1~26.04.1

    Update to 10.0.113-10.0.13-0ubuntu1~26.04.1

Original sources

Check your server →