CVE-2026-58280: Uncontrolled Recursion

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

SUSE SLED15 / SLES15 Security Update : go1.27 (SUSE-SU-2026:4625-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4625-1 advisory. Update to go1.27.2 bsc1272545: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on...

Microsoft .NET Framework: CVE-2026-97801: .NET Framework Tampering Vulnerability

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : .NET vulnerabilities (USN-8641-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8641-1 advisory. Miha Zupan discovered that .NET did not properly interpret certain HTTP requests. An attacker could possibly use this issue to...

CVE-2026-96238: Origin Validation Error

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96959: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

ROS-20261013-73-0315

The vulnerability of the ucanprobe function in the drivers/net/can/usb/ucan.c module of the Linux network device driver framework is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261013-73-0465

The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver leads to an infinite loop when a condition for exiting the loop is not met. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261013-73-0463

The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

October 13, 2026-KB5128923 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019

October 13, 2026-KB5128923 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019 Applies To .NET Note Release Date: October 13, 2026 Version: .NET Framework 3.5, 4.7.2 and 4.8 Summary This article describes the security and cumulative update...

CVE-2026-70162: Asymmetric Resource Consumption (Amplification)

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...

CVE-2026-96957: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96225: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96231: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-83520: Deserialization of Untrusted Data

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70174: Improperly Implemented Security Check for Standard

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-66822: Insertion of Sensitive Information Into Sent Data

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-111953

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Visual Studio affected versions not specified Description An issue involving type confusion, which occurs when a program uses a resource with a type that is incompatible with the expected type, allows an...

PT-2026-113157

Name of the Vulnerable Software and Affected Versions System.Security.Cryptography.Xml versions 10.0.0 through 10.0.12 System.Security.Cryptography.Xml versions 11.0.0-preview.1 through 11.0.0-rc.1 System.Security.Cryptography.Xml versions 8.0.0 through 8.0.4 System.Security.Cryptography.Xml...

PT-2026-113043

Name of the Vulnerable Software and Affected Versions Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 8.0.0 through 8.0.31 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 8.0.0 through 8.0.31 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 8.0.0 through 8.0.31...