EUVD-2026-44399

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-50648

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-50646 .NET Framework Remote Code Execution Vulnerability

...

CVE-2026-50646

CVE-2026-50646 affects the .NET Framework. The vulnerability is a protection mechanism failure that could allow an unauthenticated local attacker to execute code on the affected system (attack vector: LOCAL; privileges required: NONE; user interaction required). The CVSS 3.1 base score is 7.8 (HI...

CVE-2026-50646 .NET Framework Remote Code Execution Vulnerability

...

EUVD-2026-44397

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...

CVE-2026-50646

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...

CVE-2026-50527

CVE-2026-50527 is a stack-based buffer overflow in the .NET Framework that can allow an unauthenticated, network-based attacker to cause denial of service. The vulnerability affects the .NET Framework components handling network input; exploitation leads to an out-of-bounds write with service dis...

CVE-2026-50527 .NET Framework Denial of Service Vulnerability

...

CVE-2026-50527 .NET Framework Denial of Service Vulnerability

...

CVE-2026-50527

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-50525

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-50526

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

CVE-2026-50525

CVE-2026-50525 is a .NET Denial of Service vulnerability described as allocation of resources without limits/throttling that can allow an unauthenticated attacker to cause network-based service disruption. Connected sources confirm impact on Microsoft components including .NET and related Develop...

CVE-2026-50524 .NET Framework Denial of Service Vulnerability

...

CVE-2026-50524 .NET Framework Denial of Service Vulnerability

...

CVE-2026-50524

CVE-2026-50524 is a .NET Framework Denial of Service vulnerability caused by improper validation of a specified input type. The issue can allow an unauthenticated attacker to disrupt service over a network without requiring user interaction; impact is described as a network-based DoS with high se...

CVE-2026-50524

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-45305

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Parser::cleanup used regular expressions with overlapping quantifiers for YAML directive, comment, and document marker cleanup,...

CVE-2026-45755

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, MailtrapRequestParser::doParse received the configured webhook secret but ignored the X-Mt-Signature HMAC header, allowing unauthenticated POST requests to inject forged...