PT-2026-78478

Dell Command Update DCU, versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

Linux Distros Unpatched Vulnerability : CVE-2026-62902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-62902 Note tha...

PT-2026-73268

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-73278

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

dotnet: .NET: Information Disclosure Vulnerability

A flaw was found in .NET. This vulnerability allows an unauthorized attacker to disclose sensitive information over a network. The issue arises from the inclusion of functionality from an untrusted control sphere, which can be exploited to reveal data...

Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A specially crafted document...

GHSA-9MRH-PW7C-9MQM Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A specially crafted document...

CVE-2026-62902

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

ALPINE-CVE-2026-62902

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-62902

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

UBUNTU-CVE-2026-62902

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-54981

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-56605

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-56410

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-62902

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

.NET Information Disclosure Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

Visual Studio Code Python Extension Security Feature Bypass Vulnerability

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...

PT-2026-70594

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists where the inclusion of functionality from an untrusted control sphere allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there...

CVE-2026-62902

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-15560: Inclusion of Functionality from Untrusted Control Sphere

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...