GHSA-95x6-7hq8-2c37
Suggest an improvement- Source
- https://github.com/advisories/GHSA-95x6-7hq8-2c37
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-95x6-7hq8-2c37/GHSA-95x6-7hq8-2c37.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-95x6-7hq8-2c37
- Withdrawn
- 2026-11-10T22:16:47Z
- Published
- 2026-11-10T21:32:52Z
- Modified
- 2026-11-10T22:30:03Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N CVSS Calculator
- Summary
- Duplicate Advisory: Microsoft Security Advisory CVE-2026-114157 - ASP.NET Core Security Feature Bypass Vulnerability
- Details
-
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-7phj-vgxq-r67h. This link is maintained to preserve external references.
Original Description
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.
- Database specific
{ "cwe_ids": [ "CWE-362" ], "github_reviewed": true, "github_reviewed_at": "2026-11-10T22:16:47Z", "nvd_published_at": "2026-11-10T19:19:09Z", "severity": "HIGH" }- References
Affected packages
NuGet / Microsoft.AspNetCore.App.Runtime.win-arm64
Package
- Name
- Microsoft.AspNetCore.App.Runtime.win-arm64
- View open source insights on deps.dev
- Purl
- pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64