CVE-2026-50659

CVE-2026-50659 is a .NET spoofing vulnerability caused by improper encoding/escaping of output, enabling an authorized attacker to perform network spoofing. Affected: .NET across multiple updates; exploitation status is not detailed in the provided documents. Remediation: Microsoft has released u...

CVE-2026-50659 .NET Spoofing Vulnerability

...

CVE-2026-50659

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...

CVE-2026-50659

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...

CVE-2026-50651 .NET Denial of Service Vulnerability

...

CVE-2026-50651 .NET Denial of Service Vulnerability

...

CVE-2026-50651

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-50650

Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...

CVE-2026-50648

CVE-2026-50648 describes a denial-of-service in .NET Framework caused by allocation of resources without limits or throttling. The CVE is network-exploitable (attack vector: network, privileges: none, user interaction: none) with an attacker able to exhaust resources and disrupt service. The NVD ...

CVE-2026-50649

CVE-2026-50649 is a .NET/CLR deserialization vulnerability that allows a local attacker to execute arbitrary code by feeding untrusted data. Affected: .NET/NET Core components; root cause is insecure deserialization. Impact per NCSC: execution of arbitrary code with high severity. Exploitation re...

CVE-2026-50649 .NET Remote Code Execution Vulnerability

...

EUVD-2026-44399

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-50648 .NET Framework Denial of Service Vulnerability

...

CVE-2026-50649 .NET Remote Code Execution Vulnerability

...

CVE-2026-50649

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-50649

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-50646

CVE-2026-50646 affects the .NET Framework. The vulnerability is a protection mechanism failure that could allow an unauthenticated local attacker to execute code on the affected system (attack vector: LOCAL; privileges required: NONE; user interaction required). The CVSS 3.1 base score is 7.8 (HI...

CVE-2026-50528 .NET Security Feature Bypass Vulnerability

...

CVE-2026-50528

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-50527

CVE-2026-50527 is a stack-based buffer overflow in the .NET Framework that can allow an unauthenticated, network-based attacker to cause denial of service. The vulnerability affects the .NET Framework components handling network input; exploitation leads to an out-of-bounds write with service dis...