Improper Encoding or Escaping of Output

Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via message routing in the System.Net.Mail SMTP client. An attacker can spoof email messages by exploiting flaws in the SMTP client during message routing, causing messages to appear as though the...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via HTTP/2 request processing. An attacker can cause a denial of service by sending crafted HTTP/2 traffic that triggers an out-of-memory condition, exhausting available memory and...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via HTTP/2 request processing. An attacker can cause a denial of service by sending crafted HTTP/2 traffic that triggers an out-of-memory condition, exhausting available memory and...

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via TLS handshake processing. An attacker can cause a denial of service by sending malformed TLS handshake messages that trigger excessive resource consumption or cause the application to...

Malicious code in microsoft.netcore.universalwindowsplatform (npm)

--- -= Per source details. Do not edit below this line.=-...

Remote Code Execution

Microsoft.NetCore.App.Runtime is vulnerable to Remote Code Execution. The vulnerability is due to improper handling of specially crafted files in Visual Studio, allowing attackers to exploit this weakness by loading malicious files to execute arbitrary code...