CVE-2026-96957: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96238: Origin Validation Error

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96959: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

Microsoft .NET: CVE-2026-96233: ASP.NET Core Denial of Service Vulnerability

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...

Microsoft .NET: CVE-2026-96957: .NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

Microsoft .NET: CVE-2026-96238: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96231: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

ROS-20261013-73-0467

The vulnerability of the tapgetuserxdp function in the drivers/net/tap.c file of the Linux kernel network device driver involves copying buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20261013-73-0463

The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-112270

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70035

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-70174

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

PT-2026-113041

Name of the Vulnerable Software and Affected Versions Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 10.0.0 through 10.0.12 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 10.0.0 through 10.0.12 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 10.0.0 through 10.0.12...

PT-2026-112420

Name of the Vulnerable Software and Affected Versions Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions...

CVE-2026-70007: Out-of-bounds Write

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-58280: Uncontrolled Recursion

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-70174: Improperly Implemented Security Check for Standard

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70007

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

PT-2026-111391

Name of the Vulnerable Software and Affected Versions .NET Client Library for SIMATIC S7 Webserver API versions prior to 3.3.61 Description Applications using the library do not properly validate filenames received from remote servers during ticket downloads. An attacker capable of manipulating t...

ROS-20261013-73-0171

The vulnerability of the ctrlcmdbye function in the net/qrtr/ns.c module, which supports Qualcomm IPC cores in the Linux operating system, relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow a attacker to cause service...