3915 matches found
GHSA-VMWF-M9C5-3JVC Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability
Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A vulnerability exists in...
HTTP Response Splitting
Overview Affected versions of this package are vulnerable to HTTP Response Splitting via the MailAddressParser.TryParseAddress function due to improper neutralisation of CRLF sequences. An attacker can impersonate another user or entity by sending specially crafted data over the network...
HTTP Response Splitting
Overview Affected versions of this package are vulnerable to HTTP Response Splitting via the MailAddressParser.TryParseAddress function due to improper neutralisation of CRLF sequences. An attacker can impersonate another user or entity by sending specially crafted data over the network...
Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities
Microsoft has released its monthly security update for April 2026, which includes 165 vulnerabilities affecting a wide range of products, including eight Microsoft marked as "critical." CVE-2026-23666 is a critical Denial of Service DoS vulnerability that affects the .NET framework. Successful...
CVE-2026-32203
A flaw was found in .NET. A remote attacker could exploit a stack overflow vulnerability during encrypted key nested decryption, leading to a Denial of Service DoS. This could make the affected system unavailable to legitimate users. Mitigation Mitigation for this issue is either not available or...
CVE-2026-32178
A flaw was found in the .NET runtime System.Net.Mail in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed CR/LF sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could...
CVE-2026-32226
A flaw was found in .NET Framework. This vulnerability, a race condition, allows an unauthorized attacker to exploit improper synchronization when shared resources are concurrently executed. This can lead to a Denial of Service DoS over a network, making the affected system or application...
EUVD-2026-22363
Concurrent execution using shared resource with improper synchronization 'race condition' in .NET Framework allows an unauthorized attacker to deny service over a network...
CVE-2026-33116
Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...
CVE-2026-32203
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network...
CVE-2026-23666
Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network...
2026-04 .NET Framework 3.5 Security Update (KB5084165)
2026-04 Cumulative Update for .NET Framework 3.5 for Windows 11, version 26H1 for arm64...
2026-04 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 (KB5082411)
2026-04 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 KB5082411...
2026-04 .NET 10.0.6 Security Update for x64 Server (KB5086095)
2026-04 .NET 10.0.6 Security Update for x64 Server KB5086095...
2026-04 .NET 9.0.15 Security Update for x86 Client (KB5086097)
2026-04 .NET 9.0.15 Security Update for x86 Client KB5086097...
2026-04 .NET 10.0.6 Security Update for x86 Client (KB5086095)
2026-04 .NET 10.0.6 Security Update for x86 Client KB5086095...
2026-04 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5082411)
2026-04 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 KB5082411...
2026-04 .NET 10.0.6 Security Update for x64 Client (KB5086095)
2026-04 .NET 10.0.6 Security Update for x64 Client KB5086095...