CVE-2026-58641

A flaw was found in .NET. This vulnerability, caused by an integer overflow or wraparound, allows an unauthorized attacker to locally elevate their privileges. This could lead to an attacker gaining higher access rights than intended on the affected system.

Red Hat's .NET packages ship versions 8.0.130, 9.0.119, and 10.0.111, which are at or above the fixed versions (8.0.30, 9.0.19, and 10.0.11 respectively) for CVE-2026-58641. The integer overflow or wraparound vulnerability allowing local privilege escalation has been patched in all Red Hat .NET builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.