PT-2026-112157

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-70035: Deserialization of Untrusted Data

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

Microsoft .NET: CVE-2026-70007: .NET Framework Remote Code Execution Vulnerability

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

Microsoft .NET: CVE-2026-85363: .NET Framework Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70007: Out-of-bounds Write

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-85363: Integer Overflow or Wraparound

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...

UBUNTU-CVE-2026-70007

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-70007

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

Microsoft .NET Framework: CVE-2026-108398: .NET Framework Security Feature Bypass Vulnerability

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

Microsoft .NET Framework: CVE-2026-84008: .NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

Microsoft .NET Framework: CVE-2026-96958: .NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

Microsoft .NET Framework: CVE-2026-96960: .NET Denial of Service Vulnerability

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-112017

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 3.5 through 4.8.1 Description An untrusted search path issue exists that allows an authenticated local attacker to bypass Windows Defender Application Control WDAC restrictions. The attack involves using a...

UBUNTU-CVE-2026-70035

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-108569

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...

CVE-2026-108570 Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special...

CVE-2026-108570

A security flaw exists in the Furion .NET Framework (up to version 4.9.9.95) within the View Engine component. Specifically, the RunCompile function in the file framework/Furion/ViewEngine/Engines/ViewEngine.cs fails to properly neutralize special elements used in the template engine when process...

CVE-2026-108569

A SQL injection vulnerability exists in the Furion .NET Framework up to version 4.9.9.92 . The issue is located within the String.Replace function in the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. Specifically, improper handling of the Name argument allows for injection...

EUVD-2026-96875

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...

CVE-2026-108569: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...