coldbraid

CVE-2026-120006 Microsoft Aspire.Hosting

Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally.

CVSS
7.5 High
EPSS
0.4%
Percentile
30
Published
2026-11-10
Force
5 of 12

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-201

In the news