Vulnerabilidades de Microsoft .NET 9.0 runtime (CVE)

Registros CVE publicados para Microsoft .NET 9.0 runtime, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

56 resultados
9.8Crítica
CVE-2026-105016

Microsoft QUIC Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

1.7%EPSS
7.5Alta
CVE-2026-58280

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
6.5Media
CVE-2026-96238

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

7.5Alta
CVE-2026-96237

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

8.8Alta
CVE-2026-96235

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

5.3Media
CVE-2026-96234

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

7.5Alta
CVE-2026-96233

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5Alta
CVE-2026-96232

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

7.8Alta
CVE-2026-96231

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

6.5Media
CVE-2026-96229

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

7.8Alta
CVE-2026-96225

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

8.8Alta
CVE-2026-83520

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

1.4%EPSS
8.8Alta
CVE-2026-70035

.NET Framework Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

1.4%EPSS
8.8Alta
CVE-2026-96224

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

7.3Alta
CVE-2026-70190

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

6.7Media
CVE-2026-70165

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

7.3Alta
CVE-2026-70161

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.

8.8Alta
CVE-2026-70174

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

8.8Alta
CVE-2026-87697

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

7.5Alta
CVE-2026-69651

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
5.9Media
CVE-2026-66822

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.

7.0Alta
CVE-2026-69806

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.