CVE-2026-45491 MEDIUM

CVE-2026-45491: .NET Tampering Vulnerability

Vendor Microsoft

Product .NET 10.0

Weakness CWE-59

Published June 9, 2026

Last update June 15, 2026

View on NVD All CVEs

CVSS base score

6.2/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

What the vulnerability does

01Description

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

Key dates

02Disclosure timeline

June 9, 2026 CVE published

June 15, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-45491 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/59.html

Related vulnerabilities

Identifiers

CVE CVE-2026-45491

CWE CWE-59

CVSS 6.2 / MEDIUM

Affected versions

Vendor Microsoft

Product .NET 10.0

Affected ≥ 10.0.0 and < 10.0.9

Vendor Microsoft

Product .NET 8.0

Affected ≥ 8.0 and < 8.0.28

Vendor Microsoft

Product .NET 8.0

Affected ≥ 8.0.0 and < 8.0.28

Vendor Microsoft

Product .NET 9.0

Affected ≥ 9.0.0 and < 9.0.17

CVE-2026-45491: .NET Tampering Vulnerability

01Description

02Disclosure timeline

03References

04Related CVE