GHSA-95x6-7hq8-2c37: Duplicate Advisory: Microsoft Security Advisory CVE-2026-114157 - ASP.NET Core Security Feature Bypass Vulnerability

Q: Should this advisory be tracked independently?

No. This advisory was withdrawn as a duplicate of GHSA-7phj-vgxq-r67h and is retained only to preserve external references. Track the duplicate advisory for the authoritative vulnerability record.

Q: What level of access does an attacker need?

Exploitation requires an authorized attacker with local access and low privileges. The attack complexity is rated high and does not require user interaction.

Q: What is the potential impact if exploitation succeeds?

A successful race-condition exploit can allow local privilege elevation. The listed impact includes high confidentiality and integrity impact, with no availability impact.

Published Nov 10, 2026

Updated

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-7phj-vgxq-r67h. This link is maintained to preserve external references.

Original Description Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.

Affected Software

1 affected component

nuget/microsoft.aspnetcore.app.runtime.win-arm64>=8.0.0-preview.1.23112.2<=8.0.33

Event History

Nov 10, 2026

Advisory Published

via GitHub·09:32 PM

Data Sourced

via GitHub·09:32 PM

DescriptionSeverityWeaknessAffected Software

Withdrawn

via GitHub·10:16 PM

Frequently Asked Questions

Should this advisory be tracked independently?

No. This advisory was withdrawn as a duplicate of GHSA-7phj-vgxq-r67h and is retained only to preserve external references. Track the duplicate advisory for the authoritative vulnerability record.

What level of access does an attacker need?

Exploitation requires an authorized attacker with local access and low privileges. The attack complexity is rated high and does not require user interaction.

What is the potential impact if exploitation succeeds?

A successful race-condition exploit can allow local privilege elevation. The listed impact includes high confidentiality and integrity impact, with no availability impact.

GHSA-95x6-7hq8-2c37: Duplicate Advisory: Microsoft Security Advisory CVE-2026-114157 - ASP.NET Core Security Feature Bypass Vulnerability

Affected Software

Event History

Frequently Asked Questions

Should this advisory be tracked independently?

What level of access does an attacker need?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Should this advisory be tracked independently?

What level of access does an attacker need?

What is the potential impact if exploitation succeeds?