IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API

Vulnerabilidades de microsoft .net (CVE)

Registros CVE publicados para microsoft .net, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

195 resultados
9.2Crítica
CVE-2026-111497 KEV

Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Cloud Connector Configurator; Siemens Common Configurator (CC on IEM); Siemens Common Configurator on Device (CC on Edge)

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

83%EPSS
9.8Crítica
CVE-2026-105016

Microsoft QUIC Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

1.7%EPSS
7.5Alta
CVE-2026-97801

.NET Framework Tampering Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

8.8Alta
CVE-2026-102869

.NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8; Microsoft Microsoft .NET Framework 3.5 AND 4.8.1

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

7.5Alta
CVE-2026-58280

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
7.5Alta
CVE-2026-96960

.NET Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
7.5Alta
CVE-2026-96959

.NET Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

7.5Alta
CVE-2026-96958

.NET Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
8.8Alta
CVE-2026-96957

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

6.5Media
CVE-2026-96238

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

7.5Alta
CVE-2026-96237

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

8.8Alta
CVE-2026-96235

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

5.3Media
CVE-2026-96234

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

7.5Alta
CVE-2026-96233

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5Alta
CVE-2026-96232

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

7.8Alta
CVE-2026-96231

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

6.5Media
CVE-2026-96229

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

7.8Alta
CVE-2026-96225

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

7.5Alta
CVE-2026-84008

.NET Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

8.8Alta
CVE-2026-83520

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

1.4%EPSS
8.8Alta
CVE-2026-70035

.NET Framework Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

1.4%EPSS
8.8Alta
CVE-2026-96224

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.