Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

Vulnerability IntelligenceUBUNTU-CVE-2026-32177

UBUNTU-CVE-2026-32177

HIGH7.3

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

Published May 12, 2026

Modified 2 weeks ago

Details

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

Affected Packages

dotnet7

Ubuntu 22.04 LTS

Affected versions:

7.0.105-0ubuntu1~22.04.17.0.107-0ubuntu1~22.04.17.0.108-0ubuntu1~22.04.17.0.109-0ubuntu1~22.04.17.0.110-0ubuntu1~22.04.17.0.111-0ubuntu1~22.04.17.0.112-0ubuntu1~22.04.17.0.113-0ubuntu1~22.04.17.0.114-0ubuntu1~22.04.17.0.115-0ubuntu1~22.04.1+4 more

References

REPORT

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-may-2026-servicing-updates

REPORT

https://github.com/dotnet/announcements/issues/399

REPORT

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32177

REPORT

https://ubuntu.com/security/CVE-2026-32177

REPORT

https://www.cve.org/CVERecord?id=CVE-2026-32177

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

LowA:L

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

Upstream

CVE-2026-32177

Ecosystems

Ubuntu 22.04 LTS

Timeline

PublishedMay 12, 2026

ModifiedMay 27, 2026

UBUNTU-CVE-2026-32177 | Mondoo Vulnerability Intelligence