CVE-2026-70196

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-112284

Name of the Vulnerable Software and Affected Versions MicrosoftAspNetCoreComponentsAuthorization affected versions not specified Description An improper synchronization issue, known as a race condition, occurs during concurrent execution using a shared resource. This allows an authorized attacker...

PT-2026-112698

Name of the Vulnerable Software and Affected Versions System.Security.Cryptography.Pkcs versions 10.0.0 through 10.0.12 System.Security.Cryptography.Pkcs versions 11.0.0-preview.1 through 11.0.0-rc.1 System.Security.Cryptography.Pkcs versions 8.0.0 through 8.0.1 System.Security.Cryptography.Pkcs...

KB5126646: Windows Server 2025 Security Update (October 2026)

The remote Windows host is missing security update 5126646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

KB5126651: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2026)

The remote Windows host is missing security update 5126651. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

CVE-2026-58280

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-69651

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-92707

Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network...

UBUNTU-CVE-2026-70175

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...

UBUNTU-CVE-2026-92707

Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-70186

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-88092

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

CVE-2026-96238

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-112264

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the...

PT-2026-112282

Name of the Vulnerable Software and Affected Versions Microsoft.AspNetCore.Authentication.Negotiate versions 10.0.0 through 10.0.12 Microsoft.AspNetCore.Authentication.Negotiate versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.Authentication.Negotiate versions 9.0.0 through 9.0.20 Description...

PT-2026-112910

Name of the Vulnerable Software and Affected Versions Microsoft.AspNetCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

PT-2026-113051

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70159

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-70183: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

PT-2026-111988

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description A server-side request forgery SSRF issue exists, which allows an authorized attacker to perform spoofing over an adjacent network. SSRF is a flaw where a server is tricked...