CVE-2026-32175
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/05/2026
Last modified:
13/05/2026
Description
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.<br />
To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system.<br />
The security update fixes the vulnerability by ensuring .NET Core properly handles files.
Impact
Base Score 3.x
4.30
Severity 3.x
MEDIUM