What is CVE-2026-58641?

CVE-2026-58641 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. .NET Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2026-58641 cover?

CVE-2026-58641 covers the following CVE IDs: CVE-2026-58641. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2026-58641?

CVE-2026-58641 has a CVSS v3 base score of 7.8, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2026-58641?

CVE-2026-58641 affects 8 products, including: .NET 10.0 installed on Linux; .NET 10.0 installed on Mac OS; .NET 8.0 installed on Linux; .NET 8.0 installed on Mac OS; .NET 8.0 installed on Windows; and others — see the full list on the advisory page.

CVE-2026-58641HighCVSS 7.8

.NET Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

August 14, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-58641 →

📋 Description

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

🎯 Affected products8

.NET 10.0 installed on Linux
.NET 10.0 installed on Mac OS
.NET 8.0 installed on Linux
.NET 8.0 installed on Mac OS
.NET 8.0 installed on Windows
.NET 9.0 installed on Linux
.NET 9.0 installed on Mac OS
.NET 9.0 installed on Windows

✅ Remediation

KB5122106 (Security Update) — fixed build 10.0.11 KB5122104 (Security Update) — fixed build 8.0.30 KB5122105 (Security Update) — fixed build 9.0.19

🔗 References (7)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58641
patchhttps://dotnet.microsoft.com/download/dotnet/10.0
referencehttps://support.microsoft.com/help/5122106
patchhttps://dotnet.microsoft.com/download/dotnet/8.0
referencehttps://support.microsoft.com/help/5122104
patchhttps://dotnet.microsoft.com/download/dotnet/9.0
referencehttps://support.microsoft.com/help/5122105