.NET güvenlik açıkları

Microsoft .NET için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

RSS akışı
Toplam CVE282
Son 30 gün46
Kritik11
Aktif istismar8
282 sonuç
7.8Yüksek
CVE-2026-114148

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

9.2Kritik
CVE-2026-111497 KEV

Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Heliox Dual Port 60kW; Siemens Heliox Flex Pro; Siemens SICHARGE FLEX

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

83%EPSS
7.5Yüksek
CVE-2026-97801

.NET Framework Tampering Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

8.8Yüksek
CVE-2026-102869

.NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8; Microsoft Microsoft .NET Framework 3.5 AND 4.8.1

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

8.8Yüksek
CVE-2026-102870

ASP.NET Core Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

7.5Yüksek
CVE-2026-58280

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
7.5Yüksek
CVE-2026-96960

.NET Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
7.5Yüksek
CVE-2026-96959

.NET Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

7.5Yüksek
CVE-2026-96958

.NET Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
8.8Yüksek
CVE-2026-96957

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

6.5Orta
CVE-2026-96238

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

7.5Yüksek
CVE-2026-96237

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

8.8Yüksek
CVE-2026-96235

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

5.3Orta
CVE-2026-96234

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

7.5Yüksek
CVE-2026-96233

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5Yüksek
CVE-2026-96232

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

7.8Yüksek
CVE-2026-96231

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

6.5Orta
CVE-2026-96229

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

7.8Yüksek
CVE-2026-96225

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

8.8Yüksek
CVE-2026-85363

.NET Framework Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

7.5Yüksek
CVE-2026-84008

.NET Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

8.8Yüksek
CVE-2026-83520

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

1.4%EPSS
8.8Yüksek
CVE-2026-70035

.NET Framework Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

1.4%EPSS

Liste 2025 başından bu yana tüm kayıtları ve bu ürün için daha eski kayıtları içerir.