Early access. This site has moved to bugrater.com.

Security releases

Microsoft

ASP.NET Core Elevation of Privilege Vulnerability

CVE-2026-109481 Nov 10, 2026 Source: Vendor
Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109481
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

13 lines
Showing 1–13 of 13
CVE-2026-109481 BR2026-0003-046840 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Attila.Cs(zerodaybugs.com) with https://zerodaybugs.com/
CVE-2026-109481 BR2026-0003-046841 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Edmilson Júnior (sierghart)
CVE-2026-109481 BR2026-0003-046842 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Stavya with EHAX
CVE-2026-109481 BR2026-0003-046843 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Jules LOUAPRE
CVE-2026-109481 BR2026-0003-046844 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Adam Kistler
CVE-2026-109481 BR2026-0003-046845 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Leonardo Souza with Delfia
CVE-2026-109481 BR2026-0003-046846 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Weeraphat Srisutham
CVE-2026-109481 BR2026-0003-046847 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Suliman Tadros
CVE-2026-109481 BR2026-0003-046848 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as s3zer0
CVE-2026-109481 BR2026-0003-046849 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Artur Stetsko
CVE-2026-109481 BR2026-0003-046850 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Anonymous
CVE-2026-109481 BR2026-0003-046851 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Rajdip Dey Sarkar
CVE-2026-109481 BR2026-0003-046852 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Derek Haber with Armadin