2026-09 .NET 10.0.12 Security Update for x64 Client (KB5126106)

2026-09 .NET 10.0.12 Security Update for x64 Client KB5126106...

2026-09 .NET 10.0.12 Security Update for ARM64 Client (KB5126106)

2026-09 .NET 10.0.12 Security Update for ARM64 Client KB5126106...

2026-09 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809 for x64 (KB5126144)

2026-09 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809 for x64 KB5126144...

2026-09 .NET 10.0.12 Security Update for x86 Client (KB5126106)

2026-09 .NET 10.0.12 Security Update for x86 Client KB5126106...

2026-09 .NET 8.0.31 Security Update for ARM64 Client (KB5126104)

2026-09 .NET 8.0.31 Security Update for ARM64 Client KB5126104...

2026-09 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5126148)

2026-09 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 KB5126148...

2026-09 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 (KB5126146)

2026-09 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 KB5126146...

2026-09 .NET 8.0.31 Security Update for x64 Server (KB5126104)

2026-09 .NET 8.0.31 Security Update for x64 Server KB5126104...

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

.NET Elevation of Privilege Vulnerability

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network...

.NET and Visual Studio Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

.NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie bsc1270023. CVE-2026-53246: sctp: validate cached peer INIT chunk length in...

CVE-2026-81928

A flaw was found in Net::DNS versions before 1.57 for Perl. An attacker can cause a denial of service DoS by sending a specially crafted DNS message with a misplaced Transaction Signature TSIG record. When a system using Net::DNS, such as a forwarder or proxy, attempts to re-encode this message, ...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.22.13 security update

Red Hat build of MicroShift release 4.22.13 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...