.NET vulnerabilities
54 known CVE vulnerabilities in .NET, translated and rated.
- CVE-2026-96960High
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-96959High
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-96958High
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-96957High
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-96238Medium
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-96237High
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
- CVE-2026-96235High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
- CVE-2026-96234Medium
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-96232High
A vulnerability in .NET allows an unauthorized attacker to read data outside the allowed memory area over a network.
- CVE-2026-96231High
A vulnerability in .NET related to improper link resolution before file access allows an authorized attacker to elevate privileges locally.
- CVE-2026-96229Medium
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-96225High
A vulnerability in .NET related to improper link resolution before file access allows an authorized attacker to elevate privileges locally.
- CVE-2026-96224High
A vulnerability in .NET involving an out-of-bounds write allows an unauthorized attacker to execute code over a network.
- CVE-2026-87697High
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
- CVE-2026-84008High
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to cause denial of service over a network.
- CVE-2026-83520High
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
- CVE-2026-70197High
An out-of-bounds write vulnerability in .NET allows an unauthorized attacker to execute code over a network.
- CVE-2026-70190High
An improper link resolution before file access ('link following') vulnerability in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-70174High
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
- CVE-2026-70165Medium
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-70161High
A vulnerability in .NET involves improper limitation of a pathname to a restricted directory (path traversal). An authorized attacker can elevate privileges locally.
- CVE-2026-69651High
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-66822Medium
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-58280High
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-69806High
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-69805High
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-58649Medium
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-70354High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-62909High
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-62902Medium
An inclusion of functionality from untrusted control sphere vulnerability in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62901High
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-62900Medium
An improper removal of sensitive information before storage or transfer vulnerability in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62899Medium
An inconsistent interpretation of HTTP requests (HTTP request/response smuggling) vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-62886High
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-62871High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-58641High
An integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-50659Medium
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
- CVE-2026-50651High
A resource allocation without limits or throttling vulnerability in .NET allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-50649High
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-50528High
An incorrect authorization vulnerability has been discovered in .NET that allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-50526High
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
- CVE-2026-50525High
The .NET platform does not limit resource allocation, allowing an unauthorized attacker to perform a denial-of-service attack over a network.
- CVE-2026-47304High
A vulnerability in .NET due to improper verification of cryptographic signature allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-47302High
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to remotely cause a denial of service (DoS).
- CVE-2026-45491Medium
An improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.
- CVE-2026-45490High
Improper authorization in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-35433High
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-32177High
A heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-33116High
A vulnerability in .NET, .NET Framework, and Visual Studio causes an infinite loop, allowing an unauthorized attacker to perform a Denial of Service (DoS) attack over a network.
- CVE-2026-32178High
A vulnerability in .NET allows an unauthorized attacker to perform spoofing over a network due to improper neutralization of special elements.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

