151 matches found
CVE-2026-50651 .NET Denial of Service Vulnerability
...
CVE-2026-50649
CVE-2026-50649 is a .NET/CLR deserialization vulnerability that allows a local attacker to execute arbitrary code by feeding untrusted data. Affected: .NET/NET Core components; root cause is insecure deserialization. Impact per NCSC: execution of arbitrary code with high severity. Exploitation re...
CVE-2026-50649 .NET Remote Code Execution Vulnerability
...
CVE-2026-50525 .NET Denial of Service Vulnerability
...
CVE-2026-50525 .NET Denial of Service Vulnerability
...
CVE-2026-47302
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-47304
The CVE-2026-47304 entry concerns a vulnerability in .NET (System.Security.Cryptography.Xml) where the XML Encryption (EncryptedXml) implementation has an improper verification of cryptographic signatures. The issue affects multiple .NET package lines (notably .NET 8.x, 9.x and 10.x) with affecte...
CVE-2026-47304 .NET Security Feature Bypass Vulnerability
...
CVE-2026-57108 .NET Denial of Service Vulnerability
...
CVE-2026-57108 .NET Denial of Service Vulnerability
...
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
UBUNTU-CVE-2026-50525
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
RHEL 9 : .NET 8.0 (RHSA-2026:28227)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28227 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
dotnet: .NET: Local file tampering via link following vulnerability
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...
dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...
Security Update for Microsoft .NET Core SDK (June 2026)
The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by the following vulnerabilities as referenced in the vendor advisory. - Improper authorization in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-45490 Not...
RockyLinux 10 : .NET 10.0 (RLSA-2026:25115)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:25115 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...
RHEL 9 : .NET 10.0 (RHSA-2026:25222)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:25222 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
RHEL 8 : .NET 9.0 (RHSA-2026:25113)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:25113 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
AlmaLinux 10 : .NET 8.0 (ALSA-2026:25111)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:25111 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...