CVE-2026-96229

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96225

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-87697

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

Microsoft .NET: CVE-2026-96229: .NET Information Disclosure Vulnerability

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...

Apache NuttX RTOS 13.1.0 6LoWPAN HC06 Decompressor Out-of-Bounds Write

Apache NuttX RTOS version 13.1.0 contains an out-of-bounds write in the 6LoWPAN HC06 header decompressor when UDP and TCP support are disabled. !/usr/bin/env python Apache NuttX RTOS 13.1.0 6LoWPAN HC06 Decompressor Kernel Out-of-Bounds Write Vendor: The Apache Software Foundation Product web pag...

PT-2026-111391

Name of the Vulnerable Software and Affected Versions .NET Client Library for SIMATIC S7 Webserver API versions prior to 3.3.61 Description Applications using the library do not properly validate filenames received from remote servers during ticket downloads. An attacker capable of manipulating t...

PT-2026-111392

Name of the Vulnerable Software and Affected Versions .NET Client Library for SIMATIC S7 Webserver API versions prior to V3.3.62 Description Applications using the library do not properly redact PLC restore passwords from HTTP error exception messages. An attacker with access to logs or diagnosti...

PT-2026-113231

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network...

ROS-20261013-73-0115

The vulnerability of the inetcsklistenstop function in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Microsoft .NET Framework: CVE-2026-97801: .NET Framework Tampering Vulnerability

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network...

CVE-2026-85114: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.61. Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write...

CVE-2026-70197: Out-of-bounds Write

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-96232: Out-of-bounds Read

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network...

ROS-20261013-73-0157

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module, which is part of the networking functions in the Linux kernel, is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20261013-73-0467

The vulnerability of the tapgetuserxdp function in the drivers/net/tap.c file of the Linux kernel network device driver involves copying buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-112743

Name of the Vulnerable Software and Affected Versions Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 8.0.0 through 8.0.31 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 8.0.0 through 8.0.31 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 8.0.0 through 8.0.31...

ROS-20261013-73-0277

The vulnerability of the unixstreambpfupdateproto function in the net/unix/unixbpf.c module, which implements networking functions in the Linux operating system’s kernel, is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an...

PT-2026-121826

net/http: HTTP/2 server crash due to HPACK encoder race net/http: HTTP/2 server memory exhaustion due to Trailer headers crypto/tls: reject malformed ECH outer extension references cmd/go: checksum bypass for golang.org/fips140 cmd/go: checksum database bypass for golang.org/toolchain...

CVE-2026-97801: Improper Validation of Specified Type of Input

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network...

ROS-20261013-73-0195

The vulnerability of the fwclassify function in the net/sched/clsfw.c file of the network scheduling subsystem in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...