4407 matches found
Doxense Watchdoc security vulnerabilities
Doxense Watchdoc is a print management and cost control software from Doxense France. A security vulnerability exists in Doxense Watchdoc versions prior to 6.1.1.5332, which stems from the .NET Remoting library deserializing untrustworthy data, which could lead to remote code execution...
September 9, 2025-KB5065749 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016
None None...
September 9, 2025-KB5065956 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2
None None...
September 9, 2025-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5065960)
None None...
September 9, 2025-KB5065962 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022
None None...
.NET 9.0 Update - September 9, 2025 (KB5066234)
None None...
.NET 8.0 Update - September 9, 2025 (KB5066233)
None None...
Buffer Over-read
Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...
Buffer Over-read
Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the msdia140.dll process. An attacker can execute arbitrary code by supplying specially crafted input that triggers an integer overflow and subsequent heap-bas...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the msdia140.dll process. An attacker can execute arbitrary code by supplying specially crafted input that triggers an integer overflow and subsequent heap-bas...
Use After Free
Overview Microsoft.AspNetCore.App.Runtime.win-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code execution...
Use After Free
Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code executi...
CVE-2025-36855 EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
...
CVE-2025-36855
CVE-2025-36855 concerns a buffer over-read in DiaSymReader.dll and affects End-Of-Life .NET components. The issue applies to EOL ASP.NET 6.0.0–6.0.36 and to .NET runtimes in the CVE-2025-21176 family (8.0.0–8.0.11 and 9.0.0–9.0.0). Self-contained deployments targeting affected versions are also v...
CVE-2025-36855 EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
...
CVE-2025-36853
CVE-2025-36853 maps to CVE-2025-21172 and involves a root cause of integer overflow and heap-based overflow in msdia140.dll. The EU/CNNVD references attribute this to Microsoft .NET/Visual Studio, with CVSS v3.1 base score 7.5 (Network, High impact across confidentiality, integrity, availability;...
CVE-2025-36853 EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
...
