Findings

CVE-2026-32175

A tampering vulnerability exists when .NET Core improperly handles specially crafted files.

Published May 12, 2026 · updated Jun 18, 2026 · microsoft visual studio 2022

A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 12, 2026 · NIST NVD

    Detected

    A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a speciall

  2. Jun 18, 2026 · NIST NVD

    Updated

    A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a speciall

Affected

  • cpe microsoft/.netversion unspecified
  • cpe microsoft/visual studio 2022version unspecified
  • cpe microsoft/visual studio 2026version unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-32175

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-32175

    A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited c

    nvd.nist.gov

References

CVE-2026-32175 · ZeroDay Findings