.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

.NET Framework Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

.NET Framework Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

.NET Framework Remote Code Execution Vulnerability

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

October 13, 2026-KB5127687 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2022

October 13, 2026-KB5127687 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2022 Applies To .NET Note Release Date: October 13, 2026 Version: .NET Framework 3.5 and 4.8 The October 13, 2026 update for Windows Server 2022 includes security and cumulative reliability improvements...

.NET Framework Tampering Vulnerability

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network...

MessagePack-CSharp Denial of Service Vulnerability

Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network...

.NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

.NET and Visual Studio Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

.NET Information Disclosure Vulnerability

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...

.NET Framework Security Feature Bypass Vulnerability

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

CVE-2026-90058

A flaw was found in the Linux kernel's networking scheduler net/sched. A local unprivileged user with CAPNETADMIN capabilities within a user namespace could provide a crafted size table to a deficit scheduler, such as DRR or ETS, with a small quantum. This manipulation can cause the scheduler to...

CVE-2026-90063

A flaw was found in virtio-net, a network virtualization driver in the Linux kernel. A local user could exploit this vulnerability by crafting a specially designed TCP packet with a small gsosize value. This action could lead to an integer overflow in the gsosegs field during packet processing,...

CVE-2026-90056

A flaw was found in the Linux kernel's net: fec component. The fecptpstop function is unconditionally called during device initialization failure or device removal, even if the Precision Time Protocol PTP was not previously initialized. This incorrect state transition could lead to system...

SUSE-SU-2026:24237-1 Security update for go1.27

This update for go1.27 fixes the following issues: Update to go1.27.2 bsc1272545: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. -...

OPENSUSE-SU-2026:22093-1 Security update for go1.27

This update for go1.27 fixes the following issues: Update to go1.27.2 bsc1272545: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. -...

CVE-2026-85114

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.61. Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write...

CVE-2026-85115

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...