Vulnerabilidades de Microsoft .NET 9.0 (CVE)

Registros CVE publicados para Microsoft .NET 9.0, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

23 resultados
7.5Alta
CVE-2026-45591

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft ASP.NET Core 10.0

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

2.5%EPSS
6.2Media
CVE-2026-45491

.NET Tampering Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

7.5Alta
CVE-2026-42899

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Red Hat Red Hat Enterprise Linux 10

Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

2.4%EPSS
4.3Media
CVE-2026-32175

.NET Core Tampering Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2022 version 17.12

A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker…

7.3Alta
CVE-2026-35433

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft .NET Framework 3.5

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

7.3Alta
CVE-2026-32177

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft .NET Framework 3.5

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

7.5Alta
CVE-2026-26171

.NET Denial of Service Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft PowerShell 7.5

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

1.8%EPSS
7.5Alta
CVE-2026-32178

.NET Spoofing Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2022 version 17.12

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

2.4%EPSS
7.5Alta
CVE-2026-21218

.NET Spoofing Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.

7.5Alta
CVE-2025-30399

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

1.1%EPSS
7.3Alta
CVE-2025-21173

.NET Elevation of Privilege Vulnerability

Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12

.NET Elevation of Privilege Vulnerability

1.3%EPSS
7.5Alta
CVE-2025-21171

.NET Remote Code Execution Vulnerability

Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12; Microsoft Microsoft Visual Studio 2022 version 17.6

.NET Remote Code Execution Vulnerability

1.7%EPSS
7.5Alta
CVE-2024-43499

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6; Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.8; Microsoft Microsoft Visual Studio 2022 version 17.11

.NET and Visual Studio Denial of Service Vulnerability

2.6%EPSS