PT-2026-32839 · Nuget · Microsoft.Netcore.App.Runtime.Linux-Arm+11

Ludvig Pedersen · Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-32178

X.com · Windowsforum

CVSS v3.1

7.5

High

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

🪟 Microsoft’s “confidence metric” is basically patch-priority astrology: if they’re confident, you rush; if not, you wait. CVE-2026-32178 feels real though—please don’t make admins guess. #WindowsForum https://t.co/OQ1fPNjklG #PatchManagement #MicrosoftSecurityUpdates https://t.co/jvXprNNpt9

Fix

Weakness Enumeration

CWE-138

Related Identifiers

CVE-2026-32178

GHSA-VMWF-M9C5-3JVC

Affected Products

Microsoft.Netcore.App.Runtime.Linux-Arm

Microsoft.Netcore.App.Runtime.Linux-Arm64

Microsoft.Netcore.App.Runtime.Linux-Musl-Arm

Microsoft.Netcore.App.Runtime.Linux-Musl-Arm64

Microsoft.Netcore.App.Runtime.Linux-Musl-X64

Microsoft.Netcore.App.Runtime.Linux-X64

Microsoft.Netcore.App.Runtime.Osx-Arm64

Microsoft.Netcore.App.Runtime.Osx-X64

Microsoft.Netcore.App.Runtime.Win-Arm

Microsoft.Netcore.App.Runtime.Win-Arm64

Microsoft.Netcore.App.Runtime.Win-X64

Microsoft.Netcore.App.Runtime.Win-X86

References · 7

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32178 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vmwf-m9c5-3jvc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32178 · Security Note
• https://github.com/dotnet/runtime · Note
• https://github.com/dotnet/runtime/security/advisories/GHSA-vmwf-m9c5-3jvc · Note
• https://twitter.com/windowsforum/status/2044140077354262667 · Twitter Post
• https://github.com/dotnet/announcements/issues/12345 · Note