Product:
.NET Core
Summary
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2026-32175 |
Exploitation
To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. This requires low privileges and no user interaction, making it relatively easy for an attacker to execute the exploit over a network.
Affected Products
- .NET Core: Vulnerable to tampering due to improper file handling.
Mitigation
The security update fixes the vulnerability by ensuring .NET Core properly handles files. It is recommended to apply the latest security updates to mitigate this vulnerability.