CVE-2026-32175 Microsoft CVE debrief

Who should care

Users of .NET 10.0, .NET 8.0, .NET 9.0, Visual Studio 2022, and Visual Studio 2026 should apply patches to prevent tampering. This vulnerability has a medium priority due to the limited control an attacker would have over file and directory placement. Operators, platform administrators, vulnerability management teams, and security teams should review and apply patches.

Technical summary

The vulnerability exists due to improper handling of specially crafted files by .NET Core. An attacker can exploit this by sending a crafted file to a vulnerable system, allowing them to write arbitrary files and directories to certain locations. The security update fixes the vulnerability by ensuring .NET Core properly handles files. Affected products include .NET 10.0, .NET 8.0, .NET 9.0, Visual Studio 2022, and Visual Studio 2026.

Defensive priority

Medium priority due to the limited control an attacker would have over file and directory placement.

Recommended defensive actions

• Apply patches provided by Microsoft for .NET Core and Visual Studio
• Ensure .NET Core is updated to a version that properly handles files
• Review and update Visual Studio to the latest versions
• Implement monitoring for suspicious file writes to sensitive locations
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record was published on 2026-05-12T18:16:58.737Z and was last modified on 2026-06-18T17:29:32.797Z. The NVD entry is currently Analyzed. The vulnerability affects .NET Core and Visual Studio, with limited control over file and directory placement. Evidence limits suggest verifying affected product deployments and reviewing official advisories.

Official resources