Improper Authentication

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Improper Authentication in the RefreshSignInAsync...

GHSA-2865-HH9G-W894 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 9.0, ASP.NET Core 8.0, ASP.NET Core 6.0, and ASP.NET Core 2.3. This advisory also...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft fixed vulnerabilities in Visual Studio and .NET A malicious party could exploit the vulnerabilities to grant themselves elevated privileges and/or execute arbitrary code with developer privileges. Because developers tend to work under elevated privileges, it cannot be ruled out that...

CVE-2025-24043

Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network...

2025-03 .NET 9.0.3 Security Update for ARM64 Client (KB5054230)

2025-03 .NET 9.0.3 Security Update for ARM64 Client KB5054230...

2025-03 .NET 9.0.3 Security Update for x64 Server (KB5054230)

2025-03 .NET 9.0.3 Security Update for x64 Server KB5054230...

2025-03 .NET 8.0.14 Security Update for x64 Server (KB5054229)

2025-03 .NET 8.0.14 Security Update for x64 Server KB5054229...

2025-03 .NET 9.0.3 Security Update for x86 Client (KB5054230)

2025-03 .NET 9.0.3 Security Update for x86 Client KB5054230...

2025-03 .NET 8.0.14 Security Update for ARM64 Client (KB5054229)

2025-03 .NET 8.0.14 Security Update for ARM64 Client KB5054229...

2025-03 .NET 9.0.3 Security Update for x64 Client (KB5054230)

2025-03 .NET 9.0.3 Security Update for x64 Client KB5054230...

2025-03 .NET 8.0.14 Security Update for x64 Client (KB5054229)

2025-03 .NET 8.0.14 Security Update for x64 Client KB5054229...

2025-03 .NET 8.0.14 Security Update for x86 Client (KB5054229)

2025-03 .NET 8.0.14 Security Update for x86 Client KB5054229...

CVE-2025-24043

CVE-2025-24043 affects WinDbg/ .NET components via improper verification of cryptographic signatures, enabling remote code execution over a network by an authorized attacker. Exploitation details in the Connected documents indicate the issue stems from signature verification in SOS-related compon...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-49080: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace bsc1238033. CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization guest/host mode behind...

.NET 8.0 Update - March 11, 2025 (KB5054229)

None None...

.NET 9.0 Update - March 11, 2025 (KB5054230)

None None...

CVE-2025-24070

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

ALSA-2025:2669 Important: .NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime...

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Securi...

Important: .NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime...