[R3] Tenable Identity Exposure Version 3.77.17 Fixes Multiple Vulnerabilities

R3 Tenable Identity Exposure Version 3.77.17 Fixes Multiple Vulnerabilities Aaron Roy Tue, 04/14/2026 - 10:54 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components .NET Windows Server Hosting, NodeJS, Erlang OTP, S...

April 14, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 R2 (KB5082404)

None None...

April 14, 2026-KB5082427 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2022

None None...

April 14, 2026-KB5082425 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows Server 2022

None None...

April 14, 2026-KB5082424 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 23H2

None None...

April 14, 2026-KB5082414 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

April 14, 2026-KB5082420 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2

None None...

April 14, 2026-KB5082426 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 and Windows 10 Version 22H2

None None...

April 14, 2026-KB5082421 Cumulative Update for .NET Framework 4.8.1 for Windows 11, version 26H1

None None...

April 14, 2026-KB5082417 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 25H2 and Microsoft server operating system 24H2

None None...

April 14, 2026-KB5082411 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016

None None...

.NET Spoofing Vulnerability

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-2450

.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant Privilege Access: through 1.5.0...

CVE-2026-2450

CVE-2026-2450 concerns a .NET misconfiguration in upKeeper Solutions’ upKeeper Instant Privilege Access, enabling impersonation that hijacks a Privileged Thread of Execution. Affected product: upKeeper Instant Privilege Access up to version 1.5.0. The CVSS 4.0 vector indicates NETWORK attack vect...

CVE-2026-2450

.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant Privilege Access: through 1.5.0...

Microsoft .NET 代码问题漏洞

Microsoft .NET is a software framework developed by Microsoft Corporation in the United States. It focuses on agile software development, rapid application development, platform independence, and network transparency. There are code-related vulnerabilities in Microsoft .NET. Attackers can exploit...

PT-2026-32869

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description Concurrent execution using a shared resource with improper synchronization, known as a race condition, allows an unauthorized attacker to cause a denial of service over a network...

CVE-2026-26171

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-32839

Name of the Vulnerable Software and Affected Versions .NET versions 8.0.0 through 8.0.25 .NET versions 9.0.0 through 9.0.14 .NET versions 10.0.0 through 10.0.5 Description Improper neutralization of special elements in System.Net.Mail allows an unauthorized attacker to perform a spoofing attack...