Microsoft ASP.NET/.NET Vulnerabilities Advisory

This advisory provides an update regarding multiple vulnerabilities in Microsoft ASP.NET and .NET, rated with a CVSS Base Score of 7.8. The update specifically includes affected operating systems such as Ubuntu Linux, Oracle Linux, and RESF Rocky Linux, alongside Red Hat Enterprise Linux, and various versions of Microsoft ASP.NET Core and .NET. The vulnerabilities can be exploited by local or remote attackers to gain administrative privileges or cause a denial-of-service condition.

Organizations utilizing the affected Microsoft products and Linux distributions should review the advisory for specific version information and apply available mitigations or patches immediately. Failure to address these vulnerabilities could lead to system compromise, data breaches, or service disruptions. While no specific compliance deadline is stated, prompt action is crucial to maintain system security and prevent potential attacks.