Description
Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft .NET 10.0
10.0.0 to < 10.0.6affected
Microsoft .NET 8.0
8.0 to < 8.0.26affected
Microsoft .NET 8.0
8.0.0 to < 8.0.26affected
Microsoft .NET 9.0
9.0.0 to < 9.0.15affected
Microsoft Microsoft Visual Studio 2022 version 17.12
17.12.0 to < 17.12.19affected
Microsoft Microsoft Visual Studio 2022 version 17.14
17.14.0 to < 17.14.30affected
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32178 ↗
- https://access.redhat.com/security/cve/CVE-2026-32178 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2457781 ↗
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32178.json ↗
- https://access.redhat.com/errata/RHSA-2026:13281 ↗
- https://access.redhat.com/errata/RHSA-2026:13280 ↗
- https://access.redhat.com/errata/RHSA-2026:8467 ↗
- https://access.redhat.com/errata/RHSA-2026:8470 ↗
- https://access.redhat.com/errata/RHSA-2026:8472 ↗
- https://access.redhat.com/errata/RHSA-2026:8473 ↗
- https://access.redhat.com/errata/RHSA-2026:8468 ↗
- https://access.redhat.com/errata/RHSA-2026:8475 ↗
- https://access.redhat.com/errata/RHSA-2026:13693 ↗
- https://access.redhat.com/errata/RHSA-2026:13283 ↗
- https://access.redhat.com/errata/RHSA-2026:13282 ↗
- https://access.redhat.com/errata/RHSA-2026:8471 ↗
- https://access.redhat.com/errata/RHSA-2026:8469 ↗
- https://access.redhat.com/errata/RHSA-2026:8474 ↗
- https://access.redhat.com/errata/RHSA-2026:9077 ↗
- https://access.redhat.com/errata/RHSA-2026:9080 ↗
- https://access.redhat.com/errata/RHSA-2026:9205 ↗