Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the Microsoft QUIC process. An attacker can access sensitive information by sending specially crafted network requests. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-x86 to version 8.0.30, 9.0.19, 10.0.11 or...

CVE-2026-62899

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

UBUNTU-CVE-2026-62901

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

UBUNTU-CVE-2026-62900

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-70354 .NET Core Remote Code Execution Vulnerability

...

CVE-2026-62886 .NET Elevation of Privilege Vulnerability

...

EUVD-2026-56680

Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56412

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-62909

The CVE-2026-62909 entry concerns an uncaught exception in .NET that allows an authorized attacker to locally elevate privileges. Affected software is the .NET framework/component referenced in the CVE description. The impact is elevation of privilege with a high base score (CVSS 3.1: 7.8, HIGH),...

EUVD-2026-56410

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-62901

The CVE-2026-62901 entry describes a denial-of-service (DoS) vulnerability in .NET due to unchecked input for a loop condition, enabling an unauthenticated network attacker to cause service disruption. The available data notes network access, low attack complexity, and no privileges or user inter...

EUVD-2026-56409

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

2026-08 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2 for x64 (KB5121646)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2026-08 .NET 10.0.11 Security Update for x64 Server (KB5122106)

2026-08 .NET 10.0.11 Security Update for x64 Server KB5122106...

.NET 10.0 Update - August 11, 2026

None None...

PT-2026-70581

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An integer overflow or wraparound occurs in .NET, which could allow an unauthorized attacker to elevate privileges locally. An integer overflow happens when an arithmetic operation attempts to...

Photon OS 5.0: Dotnet PHSA-2026-5.0-92-0778

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0778. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Dotnet PHSA-2025-5.0-91-0499

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0499. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MAL-2026-13648 Malicious code in sme-rko-finance-front-operations-special-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7bfbc55631ce8b054b20444bf1e335244c998fcf00d1709f951b1afa4cb242 On require of the package, index.js loads support.js which downloads a platform-specific binary from string-concatenated cloudflare workers.dev...