{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/microsoft.netcore.app.runtime.win-x86--8.0.0--8.0.34/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:microsoft:microsoft_netcore_app_runtime_win_x86:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-114159"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Microsoft.NETCore.App.Runtime.win-x86 (\u003e= 8.0.0, \u003c 8.0.34)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Microsoft"],"content_html":"\u003cp\u003eMicrosoft .NETCore.App.Runtime.win-x86 (versions 8.0.0 through 8.0.33) is susceptible to a heap-based buffer overflow (CWE-122) which could allow an unauthorized attacker to achieve remote code execution. This advisory, originally associated with CVE-2026-114159, has been withdrawn by GitHub as a duplicate of GHSA-3cgx-w6gm-fqrx.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for remote code execution with high confidentiality, integrity, and availability impact. Exploitation requires user interaction.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory systems utilizing the Microsoft.NETCore.App.Runtime.win-x86 package for versions within the affected range (\u0026gt;= 8.0.0, \u0026lt; 8.0.34).\u003c/li\u003e\n\u003cli\u003eMonitor official Microsoft security update channels for the superseding advisory (GHSA-3cgx-w6gm-fqrx) to determine the corrective patch release.\u003c/li\u003e\n\u003cli\u003eImplement network-level egress filtering to restrict unauthorized external connections from systems running critical .NET runtime applications.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T01:54:57Z","date_published":"2026-11-11T01:54:57Z","id":"https://feed.craftedsignal.io/briefs/2026-11-microsoft-netcore-heap-overflow-b20bbb4c/","summary":"A heap-based buffer overflow vulnerability in Microsoft .NETCore.App.Runtime.win-x86 allows for remote code execution via network-based exploitation requiring user interaction.","title":"Microsoft .NETCore.App.Runtime: Heap-based buffer overflow in CVE-2026-114159","url":"https://feed.craftedsignal.io/briefs/2026-11-microsoft-netcore-heap-overflow-b20bbb4c/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:microsoft:microsoft_netcore_app_runtime_win_x86:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-114158"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Microsoft.NETCore.App.Runtime.win-x86 (\u003e= 8.0.0, \u003c 8.0.34)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","remote-code-execution","buffer-overflow","dotnet"],"_cs_type":"advisory","_cs_vendors":["Microsoft"],"content_html":"\u003cp\u003eMicrosoft has disclosed a heap-based buffer overflow vulnerability (CVE-2026-114158) impacting the Microsoft.NETCore.App.Runtime.win-x86 package. The flaw exists in versions 8.0.0 through 8.0.33. An unauthorized remote attacker could trigger this vulnerability to execute arbitrary code, though successful exploitation requires user interaction. This advisory was flagged as a duplicate of GHSA-r8h3-p8p6-ggp7 in the GitHub Advisory Database.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation could result in full loss of confidentiality, integrity, and availability of the affected system, as the vulnerability allows for remote code execution.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all environments utilizing the \u003ccode\u003eMicrosoft.NETCore.App.Runtime.win-x86\u003c/code\u003e NuGet package to identify instances within the vulnerable range (8.0.0 to 8.0.33).\u003c/li\u003e\n\u003cli\u003eReview the Microsoft Security Update Guide for CVE-2026-114158 for guidance on the required patches or updated runtime versions once released by Microsoft.\u003c/li\u003e\n\u003cli\u003ePrioritize systems that ingest untrusted or externally sourced network content where user interaction is common.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T01:54:48Z","date_published":"2026-11-11T01:54:48Z","id":"https://feed.craftedsignal.io/briefs/2026-11-microsoft-netcore-heap-overflow/","summary":"A heap-based buffer overflow vulnerability in Microsoft.NETCore.App.Runtime.win-x86 (CVE-2026-114158) allows a remote attacker to achieve arbitrary code execution via a network-based attack vector requiring user interaction.","title":"Microsoft .NET Runtime: Heap-based buffer overflow in Microsoft.NETCore.App.Runtime.win-x86 (CVE-2026-114158)","url":"https://feed.craftedsignal.io/briefs/2026-11-microsoft-netcore-heap-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - Microsoft.NETCore.App.Runtime.win-X86 (\u003e= 8.0.0, \u003c 8.0.34)","version":"https://jsonfeed.org/version/1.1"}