.NET Schwachstellen

Für Microsoft .NET veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

RSS-Feed
CVEs gesamt304
Letzte 30 Tage24
Kritisch12
Ausgenutzt8
304 Ergebnisse
5.3Mittel
CVE-2026-120796

.NET Denial of Service Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft System.Text.Json

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
7.5Hoch
CVE-2026-118749

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft Microsoft Visual Studio 2026 version 18.12

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.1%EPSS
7.5Hoch
CVE-2026-118748

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft Microsoft Visual Studio 2026 version 18.12

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.1%EPSS
6.8Mittel
CVE-2026-118746

.NET Security Feature Bypass Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS

Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.

8.8Hoch
CVE-2026-118745

Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

8.8Hoch
CVE-2026-114159

Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

8.8Hoch
CVE-2026-114158

Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

7.5Hoch
CVE-2026-114157

ASP.NET Core Security Feature Bypass Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.

6.5Mittel
CVE-2026-114156

ASP.NET Core Security Feature Bypass Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft Microsoft Visual Studio 2026 version 18.12

Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

7.5Hoch
CVE-2026-114155

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS

Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally.

7.5Hoch
CVE-2026-114154

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows; Microsoft Microsoft Visual Studio 2022 version 17.14

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.3%EPSS
8.8Hoch
CVE-2026-114152

Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

8.8Hoch
CVE-2026-114151

Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.

1.5%EPSS
5.9Mittel
CVE-2026-114150

ASP.NET Core Information Disclosure Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft Microsoft Visual Studio 2026 version 18.12

Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.

7.5Hoch
CVE-2026-114149

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.3%EPSS
7.5Hoch
CVE-2026-114147

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.3%EPSS
9.0Kritisch
CVE-2026-114146

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

7.5Hoch
CVE-2026-109481

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft Microsoft Visual Studio 2026 version 18.12

Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

7.5Hoch
CVE-2026-109478

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 8.0 installed on Linux; Microsoft .NET 8.0 installed on Mac OS; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Linux

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.2%EPSS
6.1Mittel
CVE-2026-109476

ASP.NET Core Information Disclosure Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.

7.5Hoch
CVE-2026-109475

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS

Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.

1.3%EPSS
7.5Hoch
CVE-2026-105544

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper access control in .NET allows an authorized attacker to elevate privileges locally.

7.8Hoch
CVE-2026-114148

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

9.2Kritisch
CVE-2026-111497 KEV

Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Calibre; Siemens Calibre ICE; Siemens Capital

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

83%EPSS

Die Liste enthält alle Einträge seit Anfang 2025 sowie ältere Einträge für dieses Produkt.