https://feed.craftedsignal.io/cpes/cpe2.3amicrosoftmicrosoft_netcore_app_runtime_win_x86/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 01:54:57 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-microsoft-netcore-heap-overflow-b20bbb4c/Wed, 11 Nov 2026 01:54:57 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-microsoft-netcore-heap-overflow-b20bbb4c/A heap-based buffer overflow vulnerability in Microsoft .NETCore.App.Runtime.win-x86 allows for remote code execution via network-based exploitation requiring user interaction.Microsoft .NETCore.App.Runtime.win-x86 (versions 8.0.0 through 8.0.33) is susceptible to a heap-based buffer overflow (CWE-122) which could allow an unauthorized attacker to achieve remote code execution. This advisory, originally associated with CVE-2026-114159, has been withdrawn by GitHub as a duplicate of GHSA-3cgx-w6gm-fqrx.

Impact

Successful exploitation allows for remote code execution with high confidentiality, integrity, and availability impact. Exploitation requires user interaction.

Recommendation

• Inventory systems utilizing the Microsoft.NETCore.App.Runtime.win-x86 package for versions within the affected range (>= 8.0.0, < 8.0.34).
• Monitor official Microsoft security update channels for the superseding advisory (GHSA-3cgx-w6gm-fqrx) to determine the corrective patch release.
• Implement network-level egress filtering to restrict unauthorized external connections from systems running critical .NET runtime applications.

]]>highadvisoryhttps://feed.craftedsignal.io/briefs/2026-11-microsoft-netcore-heap-overflow/Wed, 11 Nov 2026 01:54:48 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-microsoft-netcore-heap-overflow/A heap-based buffer overflow vulnerability in Microsoft.NETCore.App.Runtime.win-x86 (CVE-2026-114158) allows a remote attacker to achieve arbitrary code execution via a network-based attack vector requiring user interaction.Microsoft has disclosed a heap-based buffer overflow vulnerability (CVE-2026-114158) impacting the Microsoft.NETCore.App.Runtime.win-x86 package. The flaw exists in versions 8.0.0 through 8.0.33. An unauthorized remote attacker could trigger this vulnerability to execute arbitrary code, though successful exploitation requires user interaction. This advisory was flagged as a duplicate of GHSA-r8h3-p8p6-ggp7 in the GitHub Advisory Database.

Impact

Successful exploitation could result in full loss of confidentiality, integrity, and availability of the affected system, as the vulnerability allows for remote code execution.

Recommendation

• Inventory all environments utilizing the Microsoft.NETCore.App.Runtime.win-x86 NuGet package to identify instances within the vulnerable range (8.0.0 to 8.0.33).
• Review the Microsoft Security Update Guide for CVE-2026-114158 for guidance on the required patches or updated runtime versions once released by Microsoft.
• Prioritize systems that ingest untrusted or externally sourced network content where user interaction is common.

]]>highadvisoryvulnerabilityremote-code-executionbuffer-overflowdotnet