Microsoft .NET 9.0 güvenlik açıkları (CVE)

Microsoft .NET 9.0 için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

23 sonuç
7.5Yüksek
CVE-2026-45591

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft ASP.NET Core 10.0

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

2.5%EPSS
6.2Orta
CVE-2026-45491

.NET Tampering Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

7.5Yüksek
CVE-2026-42899

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Red Hat Red Hat Enterprise Linux 10

Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

2.4%EPSS
4.3Orta
CVE-2026-32175

.NET Core Tampering Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2022 version 17.12

A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker…

7.3Yüksek
CVE-2026-35433

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft .NET Framework 3.5

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

7.3Yüksek
CVE-2026-32177

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft .NET Framework 3.5

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

7.5Yüksek
CVE-2026-26171

.NET Denial of Service Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft PowerShell 7.5

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

1.8%EPSS
7.5Yüksek
CVE-2026-32178

.NET Spoofing Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2022 version 17.12

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

2.4%EPSS
7.5Yüksek
CVE-2026-21218

.NET Spoofing Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.

7.5Yüksek
CVE-2025-30399

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

1.1%EPSS
7.3Yüksek
CVE-2025-21173

.NET Elevation of Privilege Vulnerability

Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12

.NET Elevation of Privilege Vulnerability

1.3%EPSS
7.5Yüksek
CVE-2025-21171

.NET Remote Code Execution Vulnerability

Microsoft .NET 9.0; Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.12; Microsoft Microsoft Visual Studio 2022 version 17.6

.NET Remote Code Execution Vulnerability

1.7%EPSS
7.5Yüksek
CVE-2024-43499

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6; Microsoft Microsoft Visual Studio 2022 version 17.10; Microsoft Microsoft Visual Studio 2022 version 17.8; Microsoft Microsoft Visual Studio 2022 version 17.11

.NET and Visual Studio Denial of Service Vulnerability

2.6%EPSS