Microsoft Aspire.cli
2 CVEs affecting Microsoft Aspire.cli. Latest disclosed: 2026-11-10. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-120792 | High | 7.3 | 2026-11-10 | Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information locally. |
CVE-2026-120778 | High | 7.3 | 2026-11-10 | Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally. |