Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product .net
Total 132 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-50650 1 Microsoft 15 .net, .net Framework, Windows and 12 more 2026-10-28 N/A 7.8 HIGH
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
CVE-2026-50649 1 Microsoft 16 .net, .net Framework, Visual Studio 2026 and 13 more 2026-10-28 N/A 7.8 HIGH
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-50648 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-28 N/A 7.5 HIGH
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50646 1 Microsoft 17 .net, .net Framework, Visual Studio 2022 and 14 more 2026-10-28 N/A 7.8 HIGH
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
CVE-2026-50528 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 8.2 HIGH
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-50527 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-28 N/A 7.5 HIGH
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50526 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 7.0 HIGH
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
CVE-2026-50525 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-28 N/A 7.5 HIGH
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50524 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 7.5 HIGH
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-47304 3 Apple, Linux, Microsoft 22 Macos, Linux Kernel, .net and 19 more 2026-10-28 N/A 8.1 HIGH
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-47303 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 8.8 HIGH
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-47302 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-28 N/A 7.5 HIGH
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-47300 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-28 N/A 8.8 HIGH
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-32178 3 Apple, Linux, Microsoft 5 Macos, Linux Kernel, .net and 2 more 2026-10-26 N/A 7.5 HIGH
Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-26171 3 Apple, Linux, Microsoft 5 Macos, Linux Kernel, .net and 2 more 2026-10-26 N/A 7.5 HIGH
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-32203 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-10-26 N/A 7.5 HIGH
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.
CVE-2026-42899 3 Apple, Linux, Microsoft 4 Macos, Linux Kernel, .net and 1 more 2026-10-26 N/A 7.5 HIGH
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-35433 1 Microsoft 15 .net, .net Framework, Windows and 12 more 2026-10-26 N/A 7.3 HIGH
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-96960 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-22 N/A 7.5 HIGH
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96959 3 Apple, Linux, Microsoft 19 Macos, Linux Kernel, .net and 16 more 2026-10-22 N/A 7.5 HIGH
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.