PT-2026-40132 · Microsoft · Net Core+1

Published 2026-05-12 · Updated 2026-05-19 · CVE-2026-32175

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio/.NET versions prior to 10.0.8

Description A tampering issue occurs when .NET Core improperly handles specially crafted files. An attacker can exploit this by sending a specially crafted file to a vulnerable system, allowing them to write arbitrary files and directories to specific locations. The attacker has limited control over the destination of these files and directories. This is related to an absolute path traversal, which is a technique used to access files and directories that are stored outside the intended folder.

Recommendations Update to version 10.0.8 or later.

Fix

Weakness Enumeration

CWE-36

Related Identifiers

BDU:2026-06870

CVE-2026-32175

GHSA-RG75-Q538-X34V

Affected Products

Net Core

Visual Studio

References · 15

• https://osv.dev/vulnerability/GHSA-rg75-q538-x34v · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-32175 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32175 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06870 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32175 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-32175 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-32175 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-32175 · Vendor Advisory
• https://github.com/dotnet/runtime · Note
• https://github.com/dotnet/runtime/security/advisories/GHSA-rg75-q538-x34v · Note
• https://github.com/dotnet/announcements/issues/396 · Note
• https://feedly.com/cve/CVE-2026-32175 · Note
• https://twitter.com/f1tym1/status/2055149838015041728 · Twitter Post
• https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-may-2026-servicing-updates · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-32175 · Note