GHSA-VMWF-M9C5-3JVC Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability

Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A vulnerability exists in...

CVE-2026-32178

A flaw was found in the .NET runtime System.Net.Mail in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed CR/LF sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could...

CVE-2026-32226

A flaw was found in .NET Framework. This vulnerability, a race condition, allows an unauthorized attacker to exploit improper synchronization when shared resources are concurrently executed. This can lead to a Denial of Service DoS over a network, making the affected system or application...

EUVD-2026-22363

Concurrent execution using shared resource with improper synchronization 'race condition' in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-33116

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

CVE-2026-23666

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network...

2026-04 .NET Framework 3.5 Security Update (KB5084165)

2026-04 Cumulative Update for .NET Framework 3.5 for Windows 11, version 26H1 for arm64...

2026-04 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 for x64 (KB5082411)

2026-04 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 for x64 KB5082411...

2026-04 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5082411)

2026-04 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 KB5082411...

2026-04 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2 for x64 (KB5082418)

2026-04 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2 for x64 KB5082418...

2026-04 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 (KB5082411)

2026-04 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 KB5082411...

CVE-2026-23666

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-23666 .NET Framework Denial of Service Vulnerability

...

CVE-2026-33116 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

...

CVE-2026-32226 .NET Framework Denial of Service Vulnerability

...

CVE-2026-32226

Concurrent execution using shared resource with improper synchronization 'race condition' in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-32226 .NET Framework Denial of Service Vulnerability

...

CVE-2026-32178

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network...

[R3] Tenable Identity Exposure Version 3.77.17 Fixes Multiple Vulnerabilities

R3 Tenable Identity Exposure Version 3.77.17 Fixes Multiple Vulnerabilities Aaron Roy Tue, 04/14/2026 - 10:54 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components .NET Windows Server Hosting, NodeJS, Erlang OTP, S...

April 14, 2026-KB5082421 Cumulative Update for .NET Framework 4.8.1 for Windows 11, version 26H1

None None...