USN-8025-1: .NET vulnerability

Kevin Jones discovered that the System.Security.Cryptography.Cose component in .NET did not properly handle certain missing special elements in input data. An attacker could possibly use this issue to bypass security checks and gain unauthorized access or perform data manipulation...

GHSA-QVHC-9V3J-5RFW Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability

Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do...

CVE-2026-21218

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-21218

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network...

2026-02 .NET 8.0.24 Security Update for ARM64 Client (KB5077863)

2026-02 .NET 8.0.24 Security Update for ARM64 Client KB5077863...

2026-02 .NET 10.0.3 Security Update for ARM64 Client (KB5077862)

2026-02 .NET 10.0.3 Security Update for ARM64 Client KB5077862...

CVE-2026-21218 .NET Spoofing Vulnerability

...

CVE-2026-21218

CVE-2026-21218 affects .NET and involves improper handling of a missing special element, enabling an unauthorized network spoofing scenario. The CVSS 3.1 base score is 7.5 (HIGH) with network attack vector, no privileges required, no user interaction, and integrity impact: HIGH while confidential...

2026-02 .NET 8.0.24 Security Update for x64 Client (KB5077863)

2026-02 .NET 8.0.24 Security Update for x64 Client KB5077863...

2026-02 .NET 10.0.3 Security Update for x64 Server (KB5077862)

2026-02 .NET 10.0.3 Security Update for x64 Server KB5077862...

2026-02 .NET 8.0.24 Security Update for x86 Client (KB5077863)

2026-02 .NET 8.0.24 Security Update for x86 Client KB5077863...

2026-02 .NET 8.0.24 Security Update for x64 Server (KB5077863)

2026-02 .NET 8.0.24 Security Update for x64 Server KB5077863...

2026-02 .NET 9.0.13 Security Update for x64 Server (KB5077864)

2026-02 .NET 9.0.13 Security Update for x64 Server KB5077864...

2026-02 .NET 9.0.13 Security Update for x64 Client (KB5077864)

2026-02 .NET 9.0.13 Security Update for x64 Client KB5077864...

2026-02 .NET 10.0.3 Security Update for x86 Client (KB5077862)

2026-02 .NET 10.0.3 Security Update for x86 Client KB5077862...

Security Update for Microsoft .NET Core (February 2026)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - .NET Spoofing Vulnerability CVE-2026-21218 Note that Nessus has not tested for this issue but has instead relied only on the...

February 10, 2026-KB5074837 Cumulative Update for .NET Framework 4.8.1 for Windows 11, version 26H1

None None...

UBUNTU-CVE-2026-21218

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-25592

The CVE-2026-25592 entry affects Microsoft's Semantic Kernel .NET SDK, specifically the SessionsPythonPlugin, with an Arbitrary File Write vulnerability present prior to version 1.70.0. The issue allows writing files to arbitrary locations via the plugin, and the fixed version is Microsoft.Semant...

GHSA-2WW3-72RP-WPP4 Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK

Impact What kind of vulnerability is it? Who is impacted? An Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. Developers who have built applications which include Microsoft's Semantic Kernel .NET SDK and...