35421 matches found
CVE-2026-69439
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
net/mail: golang: Go net/mail: Denial of Service via crafted email inputs
A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
CVE_2019_18935
RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 For exploitation to work, you generally need a version with hard coded keys, or you need to know the key, for...
execute-assembly-pico
Execute Assembly PICO A PICO for Crystal Palace that implements native CLR hosting to execute an appended .NET assembly in memory, using the same technique as the donut shellcode generator. This allows you to load .NET tools like Rubeus or Seatbelt from position-independent code without dropping...
EUVD-2026-73918
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-69806
CVE-2026-69806 is a .NET Elevation of Privilege vulnerability caused by exposure of sensitive information to an unauthorized actor, which an authorized local attacker can exploit to escalate privileges. The CVSS 3.1 score is 7.0 (HIGH) with the vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicat...
EUVD-2026-73722
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73721
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69805
CVE-2026-69805 is an elevation of privilege vulnerability in Microsoft .NET , caused by external control of a file name or path . An unauthorized network-based attacker can exploit this to escalate privileges, with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is...
CVE-2026-58649
CVE-2026-58649 is an origin validation error in .NET that allows an unauthorized, remote attacker to disclose information over a network . The vulnerability requires user interaction (UI:R) but no prior privileges (PR:N). CVSS 3.1 scores it 6.5 (MEDIUM) with high confidentiality impact and no int...
CVE-2026-69439
A heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network, as reported by Microsoft (CNA: [email protected]). The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicati...
2026-09 .NET 9.0.20 Security Update for x64 Client (KB5126105)
2026-09 .NET 9.0.20 Security Update for x64 Client KB5126105...
2026-09 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 (KB5126146)
2026-09 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 KB5126146...