2026-02 .NET 10.0.3 Security Update for ARM64 Client (KB5077862)

2026-02 .NET 10.0.3 Security Update for ARM64 Client KB5077862...

CVE-2026-21218 .NET Spoofing Vulnerability

...

CVE-2026-21218

CVE-2026-21218 affects .NET and involves improper handling of a missing special element, enabling an unauthorized network spoofing scenario. The CVSS 3.1 base score is 7.5 (HIGH) with network attack vector, no privileges required, no user interaction, and integrity impact: HIGH while confidential...

2026-02 .NET 10.0.3 Security Update for x64 Server (KB5077862)

2026-02 .NET 10.0.3 Security Update for x64 Server KB5077862...

2026-02 .NET 8.0.24 Security Update for x86 Client (KB5077863)

2026-02 .NET 8.0.24 Security Update for x86 Client KB5077863...

2026-02 .NET 8.0.24 Security Update for x64 Client (KB5077863)

2026-02 .NET 8.0.24 Security Update for x64 Client KB5077863...

2026-02 .NET 8.0.24 Security Update for x64 Server (KB5077863)

2026-02 .NET 8.0.24 Security Update for x64 Server KB5077863...

2026-02 .NET 9.0.13 Security Update for x64 Server (KB5077864)

2026-02 .NET 9.0.13 Security Update for x64 Server KB5077864...

2026-02 .NET 9.0.13 Security Update for x64 Client (KB5077864)

2026-02 .NET 9.0.13 Security Update for x64 Client KB5077864...

2026-02 .NET 10.0.3 Security Update for x86 Client (KB5077862)

2026-02 .NET 10.0.3 Security Update for x86 Client KB5077862...

Security Update for Microsoft .NET Core (February 2026)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - .NET Spoofing Vulnerability CVE-2026-21218 Note that Nessus has not tested for this issue but has instead relied only on the...

UBUNTU-CVE-2026-21218

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network...

February 10, 2026-KB5074837 Cumulative Update for .NET Framework 4.8.1 for Windows 11, version 26H1

None None...

CVE-2026-25592

The CVE-2026-25592 entry affects Microsoft's Semantic Kernel .NET SDK, specifically the SessionsPythonPlugin, with an Arbitrary File Write vulnerability present prior to version 1.70.0. The issue allows writing files to arbitrary locations via the plugin, and the fixed version is Microsoft.Semant...

GHSA-2WW3-72RP-WPP4 Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK

Impact What kind of vulnerability is it? Who is impacted? An Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. Developers who have built applications which include Microsoft's Semantic Kernel .NET SDK and...

CVE-2025-59093

Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server. The password is derived from static random values, which are concatenated to the hostname and a random string that can be read by every user from the registry. This allows an attacker t...

MiracleLinux 8 : dotnet6.0-6.0.109-1.el8.ML.1 (AXSA:2022-3851:12)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3851:12 advisory. dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. CVE-2022-38013 CVEs: CVE-2022-38013 Tenable has...

MiracleLinux 8 : dotnet8.0-8.0.103-1.el8_9.ML.1 (AXSA:2024-7614:07)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7614:07 advisory. dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support CVE-2024-21392 Tenable has extracted the preceding description block directly from the MiracleLinu...

MiracleLinux 8 : dotnet7.0-7.0.114-1.el8.ML.1 (AXSA:2024-7360:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7360:01 advisory. dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand CVE-2023-36049 dotnet: ASP.NET Security Feature Bypass Vulnerability in...

MiracleLinux 8 : dotnet-2.1.525-1.el8.ML.1 (AXSA:2021-2361:07)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2361:07 advisory. dotnet: Dump file created world-readable CVE-2021-34485 Default inclusions for applications built with .NET Core have been updated to reference the newest...