CVE-2026-35433

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

An inclusion of functionality from untrusted control sphere vulnerability in .NET allows an unauthorized attacker to disclose information over a network.

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

An improper removal of sensitive information before storage or transfer vulnerability in .NET allows an unauthorized attacker to disclose information over a network.

An inconsistent interpretation of HTTP requests (HTTP request/response smuggling) vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network.

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

An integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.