313178 matches found
CVE-2026-70159
A Denial-of-Service vulnerability exists in ASP.NET Core due to the allocation of resources without limits or throttling . This flaw allows an unauthorized attacker to cause a service interruption over a network. The vulnerability has a CVSS v3.1 score of 7.5 (High) . No specific patch versions o...
CVE-2026-70175
A vulnerability in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network due to improper authentication . The vulnerability has a CVSS 3.1 base score of 8.1 (High) . While the technical root cause and specific versions are not detailed in the provided documents, the im...
CVE-2026-70165
The .NET runtime is vulnerable to an improper link resolution before file access (link following) issue. This flaw allows an authorized attacker to achieve local privilege escalation on the affected system. The vulnerability is categorized as a MEDIUM severity issue with a CVSS score of 6.70 . No...
CVE-2026-70190
.NET contains an improper link resolution before file access (link following) vulnerability, identified as CVE-2026-70190 . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is part of the Microsoft Developer Tools suite. Official metrics indicate a...
EUVD-2026-99698
Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-70181
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-70190
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
EUVD-2026-99699
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70190
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70175
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-70161
Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...
EUVD-2026-99684
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally...
EUVD-2026-99687
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2026-70116
A stack-based buffer overflow vulnerability exists in the Windows Resilient File System (ReFS) . This flaw allows an unauthorized attacker to perform a security feature bypass through a physical attack vector. The CVSS 3.1 score is 4.2 (Medium), with a high complexity and a high impact on integri...
CVE-2026-70149
The Windows Client Side Caching driver (csc.sys) is affected by a vulnerability that allows an authorized attacker to disclose sensitive information locally. The underlying cause is attributed to Heap-based Buffer Overflow and Integer Overflow or Wraparound issues. The impact includes high levels...
CVE-2026-70186
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
EUVD-2026-99688
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...
EUVD-2026-99677
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...