.NET 10.0 security, bug fix, and enhancement update

An update is available for dotnet10.0. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

RockyLinux 8 : .NET 10.0 (RLSA-2026:41900)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41900 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

RockyLinux 8 : .NET 8.0 (RLSA-2026:41901)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41901 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

CVE-2026-50659 .NET Spoofing Vulnerability

...

CVE-2026-50659

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...

CVE-2026-50659

CVE-2026-50659 is a .NET spoofing vulnerability caused by improper encoding/escaping of output, enabling an authorized attacker to perform network spoofing. Affected: .NET across multiple updates; exploitation status is not detailed in the provided documents. Remediation: Microsoft has released u...

CVE-2026-50659

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...