46387 matches found
CVE-2026-70174
The .NET runtime is vulnerable to a Remote Code Execution (RCE) flaw due to an improperly implemented security check for standard . An unauthorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS score of 8.80 and is categorized under...
CVE-2026-87697
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
EUVD-2026-99638
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-87697
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-87697
The .NET component is vulnerable to a Remote Code Execution (RCE) vulnerability due to the deserialization of untrusted data . An unauthorized attacker can exploit this flaw over a network to execute arbitrary code. The vulnerability has been identified in the context of Microsoft Developer Tools...
CVE-2026-66822
The .NET component is affected by an information disclosure vulnerability where sensitive information can be inserted into sent data. This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a CVSS v3.1 score of 5.9 (Medium severity) and is classifie...
CVE-2026-69651
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-66822
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...
EUVD-2026-99278
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-66822
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-69651
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
EUVD-2026-99277
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-69651
A Denial-of-Service vulnerability exists in .NET due to inefficient algorithmic complexity . This flaw allows an unauthorized attacker to cause a service disruption over a network. The vulnerability has been identified as part of the Microsoft Developer Tools suite. While the vulnerability is con...
CVE-2026-108398
The .NET Framework is affected by an untrusted search path vulnerability (CWE-426), which allows an authorized attacker to bypass a security feature locally. This vulnerability results in the evading of security measures . While specific version numbers for the affected components are not explici...
EUVD-2026-99069
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...
vulnerabilities handled in Microsoft Developer Tools
Microsoft has identified vulnerabilities in various components of the Developer Tools, such as .NET and Visual Studio. Malicious actors can exploit these vulnerabilities, resulting in damages as described in the tables below. .NET: |------------------|------|-------------------------------------|...
2026-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 22H2 for ARM64 (KB5128925)
2026-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 22H2 for ARM64 KB5128925...
2026-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 (KB5128925)
2026-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 KB5128925...