CVE records published for Microsoft .NET 9.0 runtime, newest first. Follow to get an email when a new one appears.
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.
