CVE-2026-45491Patch(apple / .net)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch apple .net systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

apple CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491

Weakness type (CWE)

CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

.net
linux_kernel
macos
windows

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-06-09); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

apple linux microsoft

Products

.netlinux_kernelmacoswindows

1 version affected across 4 products

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Patch

150.0%

Disclosure

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-09	1	Patch1
2026-06-12	1	Disclosure1

Full discourse2 posts

ThreatCluster@threatcluster134d
Disclosure
Ubuntu reported two .NET vulnerabilities, CVE-2026-45491 and CVE-2026-45591, enabling local file tampering and denial of service across Ubuntu 26.04 LTS, 25.10, 24.04 LTS and 22.04 LTS in security advisory USN-8420-1. https://threatcluster.io/cluster/critical-net-vulnerabilities-in-ubuntu-affect-multiple-relea-bcc015e8
Post summary
Ubuntu’s advisory USN-8420-1 reports two new .NET vulnerabilities, CVE-2026-45491 and CVE-2026-45591, which allow local file tampering and denial of service on multiple Ubuntu LTS releases.
0000057
330 followersView on X
America's Pick@nims213136d
Patch
Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws https://ift.tt/XORGbth Tag CVE ID CVE Title Severity .NET CVE-2026-45491 .NET Tampering Vulnerability Important .NET CVE-2026-45490 .NET SDK Elevation of Privilege Vulnerability Important Active Direct…
Post summary
The tweet advertises Microsoft’s June 2026 Patch Tuesday, noting that three zero-day CVEs—including two critical .NET flaws—are fixed.
0000033
1.7K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	macos	-	-	-
OS	linux	linux_kernel	-	-	-
App	microsoft	.net	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard apple CVEs linux CVEs microsoft CVEs .net vulnerabilities