Tampering Vulnerability in .NET Core by Microsoft

CVE-2026-32175

What is CVE-2026-32175?

A tampering vulnerability exists in .NET Core, where the framework inadequately processes specially crafted files. This flaw allows an attacker to potentially write arbitrary files and directories to specific locations on a compromised system. While the attacker will have limited control over where these files are placed, the risk of unauthorized data manipulation remains significant. Exploiting this vulnerability requires the attacker to send a specifically crafted file to the vulnerable application. A security update has been released to address this issue, ensuring that .NET Core correctly manages file handling.

References