4394 matches found
The vulnerability of the Microsoft .NET software platform, Microsoft .NET Framework, and the source code editor Visual Studio arises from uncontrolled memory allocation, allowing attackers to trigger a service failure.
The vulnerability of the Microsoft .NET software platform, Microsoft .NET Framework, and the source code editor Visual Studio is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
October 22, 2024-KB5045991 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2
None None...
Remote Code Execution (RCE)
.NET and Visual Studio is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling and validation of input or components, which allows an attacker to execute arbitrary code remotely by crafting malicious inputs or exploiting affected features...
dotnet: Denial of Service in System.Text.Json
A flaw was found in dotnet. In System.Text.Json, applications that deserialize input to a model with an ExtensionData property can be vulnerable to an algorithmic complexity attack, resulting in a denial of service...
dotnet: Multiple .NET components susceptible to hash flooding
A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...
dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList
A flaw was found in dotnet. The System.IO.Packaging library may allow untrusted inputs to influence algorithmically complex operations, resulting in a denial of service...
dotnet: Multiple .NET components susceptible to hash flooding
A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...
dotnet: Denial of Service in System.Text.Json
A flaw was found in dotnet. In System.Text.Json, applications that deserialize input to a model with an ExtensionData property can be vulnerable to an algorithmic complexity attack, resulting in a denial of service...
dotnet: Denial of Service in System.Text.Json
A flaw was found in dotnet. In System.Text.Json, applications that deserialize input to a model with an ExtensionData property can be vulnerable to an algorithmic complexity attack, resulting in a denial of service...
dotnet: Multiple .NET components susceptible to hash flooding
A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...
dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution
A flaw was found in dotnet. When closing an HTTP/3 stream while application code is writing to the response body, a race condition can cause a use-after-free...
dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList
A flaw was found in dotnet. The System.IO.Packaging library may allow untrusted inputs to influence algorithmically complex operations, resulting in a denial of service...
dotnet: Denial of Service in System.Text.Json
A flaw was found in dotnet. In System.Text.Json, applications that deserialize input to a model with an ExtensionData property can be vulnerable to an algorithmic complexity attack, resulting in a denial of service...
dotnet: Multiple .NET components susceptible to hash flooding
A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...
dotnet: Denial of Service in System.Text.Json
A flaw was found in dotnet. In System.Text.Json, applications that deserialize input to a model with an ExtensionData property can be vulnerable to an algorithmic complexity attack, resulting in a denial of service...
USN-7058-1 dotnet6, dotnet8 vulnerabilities
Brennan Conroy discovered that the .NET Kestrel web server did not properly handle closing HTTP/3 streams under certain circumstances. An attacker could possibly use this issue to achieve remote code execution. This vulnerability only impacted .NET8. CVE-2024-38229 It was discovered that .NET...
Microsoft .NET和Microsoft Visual Studio 安全漏洞
Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle.Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...
PT-2024-7147
Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, and Visual Studio affected versions not specified Description The issue is related to an uncontrolled memory allocation, which can be exploited by a remote attacker to cause a denial of service. Recommendations At the...
Microsoft .NET、Microsoft .NET Framework和Microsoft Visual Studio 安全漏洞
Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools, and Microsoft .NET Framework is a comprehensive and consistent programming model and a development platform for building applications for Windows, Windows Store, Windows Phone,...
