MS16-035: Security update for the .NET Framework to address security feature bypass

Resolves a vulnerability in the Microsoft .NET Framework. The security feature bypass exists in a .NET Framework component that does not properly validate certain elements of a signed XML document.October 11, 2016 Revised bulletin to announce that security updates 3135994 and 3135995 for the...

MS16-035: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: March 8, 2016

MS16-035: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: March 8, 2016 View products that this article applies to. Summary This update resolves a vulnerability in the Microsoft .NET Framework. The security feature bypass exists in a .NET...

MS15-118: Description of the security update for the .NET Framework 4 on Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1: November 10, 2015

MS15-118: Description of the security update for the .NET Framework 4 on Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1: November 10, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET...

MS14-053: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 9, 2014

MS14-053: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 9, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that...

MS13-082: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: October 8, 2013

MS13-082: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: October 8, 2013 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow for denial of service. Summa...

Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013

Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013 September 9, 2014 This security update has been re-released and contains updated files. We recommend that you apply this updated security update. View...

MS10-070: Description of the security update for the Microsoft .NET Framework 3.5 on Windows Server 2008, on Windows Vista, on Windows XP, and on Windows Server 2003

MS10-070: Description of the security update for the Microsoft .NET Framework 3.5 on Windows Server 2008, on Windows Vista, on Windows XP, and on Windows Server 2003 INTRODUCTION Microsoft has released security bulletin MS10-070. To view the complete security bulletin, visit one of the following...

CVE-2016-7270: Undefined Security Weakness

The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information by leveraging key guessability, aka ".NET Information Disclosure...

Microsoft .NET Framework Information Disclosure Vulnerability (CNVD-2016-12419)

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...

Microsoft .NET Framework Information Disclosure Vulnerability (3205640)

This host is missing an important security update according to Microsoft Bulletin MS16-155. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

KLA10925 Information Disclosure vulnerability in Microsoft .NET Framework 4.6.2

Mishandling of a developer-supplied key was found in Microsoft .NET 4.6.2 Framework’s Data Provider for SQL Server. By exploiting this vulnerability malicious users can obtain sensitive cleartext information. This vulnerability can be exploited remotely via leveraging key guessability. Original...

Microsoft .NET Framework CVE-2016-7270 Information Disclosure Vulnerability

Description The Microsoft .NET Framework is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information. Successful exploits will lead to other attacks. Technologies Affected Microsoft .NET Framework 4.6.2 Microsoft Windows 10 Version 1607...

HPSBGN3551 rev. 2- HP Hotkey, Escalation of Privilege

Potential Security Impact Elevation of Privilege VULNERABILITY SUMMARY Hotkey Support service used an unquoted service path. An attacker who had physical access to the system may gain elevated privileges by inserting an executable file in the path of the affected service RESOLUTION Download and...

Microsoft .NET Framework Information Disclosure Vulnerability (3192884)

This host is missing an important security update according to Microsoft Bulletin MS16-120. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2016-3255

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka ".NET Information Disclosure...

CVE-2016-3255

CVE-2016-3255 affects Microsoft .NET Framework versions including 2.0 SP2, 3.x, and 4.x. The issue is an information disclosure via XML data containing external entity declarations (XXE), enabling a remote attacker to read arbitrarily files. Connected MSKB entries indicate a July 12, 2016 securit...

CVE-2016-3255: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka ".NET Information Disclosure...

Microsoft .NET Framework Information Disclosure Vulnerability (3170048)

This host is missing an important security update according to Microsoft Bulletin MS16-091. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft .NET Framework 3.5 on Windows Embedded 8 standard for x64 (KB3135989)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Microsoft .NET Framework CVE-2016-3255 XML External Entity Information Disclosure Vulnerability

Description The Microsoft .NET Framework is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information. Successful exploits may lead to other attacks. Technologies Affected Microsoft .NET Framework 2.0 SP2 Microsoft .NET Framework...