CVE-2026-26127

CVE-2026-26127 is a DoS vulnerability in the .NET stack caused by an out-of-bounds read that can be triggered by unauthenticated, network-based access. Connected advisories confirm this affects .NET and related ASP.NET Core behavior under resource allocation conditions. The published information ...

CVE-2026-26127

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-26131

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-26131 .NET Elevation of Privilege Vulnerability

...

CVE-2026-26131

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-26131

CVE-2026-26131 is a .NET Elevation of Privilege vulnerability with CVSS v3.1 base score 7.8 (HIGH). The entry indicates a LOCAL attacker with LOW privileges can exploit it without user interaction, potentially affecting confidentiality, integrity, and availability (all HIGH), under an UNCHANGED s...

2026-03 .NET 10.0.4 Security Update for x86 Client (KB5081276)

2026-03 .NET 10.0.4 Security Update for x86 Client KB5081276...

2026-03 .NET 10.0.4 Security Update for ARM64 Client (KB5081276)

2026-03 .NET 10.0.4 Security Update for ARM64 Client KB5081276...

2026-03 .NET 10.0.4 Security Update for x64 Client (KB5081276)

2026-03 .NET 10.0.4 Security Update for x64 Client KB5081276...

2026-03 .NET 8.0.25 Security Update for ARM64 Client (KB5081277)

2026-03 .NET 8.0.25 Security Update for ARM64 Client KB5081277...

2026-03 .NET 9.0.14 Security Update for x86 Client (KB5081278)

2026-03 .NET 9.0.14 Security Update for x86 Client KB5081278...

2026-03 .NET 8.0.25 Security Update for x86 Client (KB5081277)

2026-03 .NET 8.0.25 Security Update for x86 Client KB5081277...

2026-03 .NET 8.0.25 Security Update for x64 Server (KB5081277)

2026-03 .NET 8.0.25 Security Update for x64 Server KB5081277...

2026-03 .NET 10.0.4 Security Update for x64 Server (KB5081276)

2026-03 .NET 10.0.4 Security Update for x64 Server KB5081276...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, prometheus, x509-certificate-exporter, flux-image-automation-controller, docker-cli, apache-exporter, authservice, gogatekeeper, aws-load-balancer-controller, openfga, secrets-store-csi-driver-provider-gcp, spegel, step-ca,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, prometheus, x509-certificate-exporter, flux-image-automation-controller, docker-cli, apache-exporter, authservice, gogatekeeper, aws-load-balancer-controller, openfga, secrets-store-csi-driver-provider-gcp, spegel, step-ca,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: prometheus, azure-ipam, gogatekeeper, step-ca, nats-top, spqr, crossplane-provider-aws-ec2, nri-redis, bank-vaults, newrelic-k8s-metadata-injection, nginx-prometheus-exporter, kyverno-policy-reporter, kyverno, terraform-provider-tls, gitlab-kas, php-fpmexporter,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: prometheus, azure-ipam, gogatekeeper, step-ca, nats-top, spqr, crossplane-provider-aws-ec2, nri-redis, bank-vaults, newrelic-k8s-metadata-injection, nginx-prometheus-exporter, kyverno-policy-reporter, kyverno, terraform-provider-tls, gitlab-kas, php-fpmexporter,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: prometheus, azure-ipam, gogatekeeper, step-ca, nats-top, spqr, crossplane-provider-aws-ec2, nri-redis, bank-vaults, newrelic-k8s-metadata-injection, nginx-prometheus-exporter, kyverno-policy-reporter, kyverno, terraform-provider-tls, gitlab-kas, php-fpmexporter,...

Microsoft .NET 安全漏洞

Microsoft .NET is a software framework developed by Microsoft Corporation in the United States. It focuses on agile software development, rapid application development, platform independence, and network transparency. There are security vulnerabilities in Microsoft .NET. Attackers can exploit the...