Reliability Rollup 3184951 for the .NET Framework on Windows Server 2012

Reliability Rollup 3184951 for the .NET Framework on Windows Server 2012 November 8, 2016 A detection change was made to account for the .NET Framework 4.6.1 hotfix rollup for customers who were not being correctly offered this reliability rollup for the .NET Framework 4.6.1. Summary This article...

Reliability Rollup 3179949 for the .NET Framework 4.6 and 4.6.1 on Windows Vista SP2, Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1

Reliability Rollup 3179949 for the .NET Framework 4.6 and 4.6.1 on Windows Vista SP2, Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1 This article describes the reliability rollup 3179949 for the Microsoft .NET Framework on Windows Vista Service Pack 2 SP2, Windows 7 SP1,...

Reliability Rollup 3179930 for the .NET Framework 4.5.2 on Windows Vista SP2, Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1

Reliability Rollup 3179930 for the .NET Framework 4.5.2 on Windows Vista SP2, Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1 This article describes the reliability rollup 3179930 for the Microsoft .NET Framework on Windows Vista Service Pack 2 SP2, Windows 7 SP1, Windows...

Description of the security update for the .NET Framework 4.5, the .NET Framework 4.5.1, and the .NET Framework 4.5.2 on Windows 8, Windows RT, and Windows Server 2012: May 13, 2014

Description of the security update for the .NET Framework 4.5, the .NET Framework 4.5.1, and the .NET Framework 4.5.2 on Windows 8, Windows RT, and Windows Server 2012: May 13, 2014 View products that this article applies to. Introduction This update is for the Microsoft .NET Framework to disable...

SQL Injection Vulnerability in ZYDM Parameters of Digital Campus Management System of Shanghai Pengda Computer System Development Co.

The digital campus system of Shanghai Pengda Computer System Development Co., Ltd. is a technology platform using .NET+SqlServer. NET+SqlServer technology platform. Shanghai Pengda Computer System Development Co., Ltd. digital campus management...

Microsoft .NET Framework Info Disclosure

The vulnerability of the Microsoft .NET Framework software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to read arbitrary files using XML data, which contains a declaration of an external object along with a reference to an...

CVE-2016-3255

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka ".NET Information Disclosure...

Microsoft .NET Framework Code Execution

The Microsoft .NET Framework contains a vulnerability related to the use of incorrect address space randomization ALSR. Exploiting this vulnerability allows a malicious actor to bypass ASLR protection and load additional malware code into the process to exploit other vulnerabilities...

Windows .NET Framework Code Execution

The vulnerability of the Windows operating system’s font library and the Microsoft .NET Framework software platform is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted embedded font...

Microsoft .NET Framework Privilege Escalation

The vulnerability of the Microsoft .NET Framework software platform is related to improper handling of library loading. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...

Microsoft .NET Framework Remote Code Execution Vulnerability (CNVD-2016-02244)

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...

CVE-2016-0148

Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."...

April 12, 2016 — KB3147461 (OS Build 10240.16769)

None None...

Microsoft .NET Framework XML Validation Security Feature Bypass Vulnerability

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...

Cumulative update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: March 8, 2016

None None...

CVE-2016-0047

WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."...

CVE-2016-0033

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compilation of XSLT transforms, which allows remote attackers to cause a denial of service performance degradation via crafted XSLT data, aka ".NET Framework Stack Overflow Denial of Service...

Cumulative update for Windows 10: February 9, 2016

None None...

Microsoft .NET Framework Arbitrary Code Injection

The vulnerability of the ASP.NET software platform, Microsoft .NET Framework, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted variable value...

Microsoft .NET Framework Info Disclosure

The vulnerability of the XML DTD parser component in the Microsoft .NET Framework is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to remotely read arbitrary files by creating external declarations on XXE objects...