dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML

A flaw was found in dotnet. This issue can allow bypass restrictions when deserializing a DataSet or DataTable from XML...

dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack

A vulnerability was found in dotnet. This issue exists in NuGet where a potential race condition can lead to a symlink attack...

dotnet: .NET Kestrel: Denial of Service processing X509 Certificates

A vulnerability was found in dotnet. This issue can lead to a denial of service while processing X509 Certificates...

dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption

A vulnerability was found in dotnet. This issue may allow remote code execution via source generators that can lead to a crash due to unmanaged heap corruption...

dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML

A flaw was found in dotnet. This issue can allow bypass restrictions when deserializing a DataSet or DataTable from XML...

dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption

A vulnerability was found in dotnet. This issue may allow remote code execution via source generators that can lead to a crash due to unmanaged heap corruption...

dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack

A vulnerability was found in dotnet. This issue exists in NuGet where a potential race condition can lead to a symlink attack...

CVE-2023-33135

A vulnerability was found in dotnet. This issue may allow local privilege escalation through the dotnet tool restore command...

CVE-2023-33128

A vulnerability was found in dotnet. This issue may allow remote code execution via source generators that can lead to a crash due to unmanaged heap corruption...

CVE-2023-33126

A vulnerability was found in dotnet. This issue may allow remote code execution through the dotnet format command cwd dll hijack vulnerability...

CVE-2023-32032

A vulnerability was found in dotnet. This issue can cause an elevation of privilege when the TarFile.ExtractToDirectory ignores the extraction directory argument...

CVE-2023-29337

A vulnerability was found in dotnet. This issue exists in NuGet where a potential race condition can lead to a symlink attack...

CVE-2023-29331

A vulnerability was found in dotnet. This issue can lead to a denial of service while processing X509 Certificates...

CVE-2023-24936

A flaw was found in dotnet. This issue can allow bypass restrictions when deserializing a DataSet or DataTable from XML...

CVE-2023-24895

A flaw was found in dotnet. This issue can allow remote code execution when WPF is handling XAML Frame elements...

CVE-2023-24897

A flaw was found in dotnet. This issue can allow remote code execution through an out-of-bounds write when loading PDB type records in msdia140.dll used by Visual Studio...

CVE-2023-33128

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2023-33126

.NET and Visual Studio Remote Code Execution Vulnerability...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. A vulnerability exists in .NET when processing malicious X.509 client certificates that may consume excessive CPU. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. A vulnerability exists in .NET when processing malicious X.509 client certificates that may consume excessive CPU. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...