.NET vulnerabilities
26 known CVE vulnerabilities in .NET, translated and rated.
- CVE-2026-70354High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-62909High
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-62902Medium
An inclusion of functionality from untrusted control sphere vulnerability in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62901High
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-62900Medium
An improper removal of sensitive information before storage or transfer vulnerability in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62899Medium
An inconsistent interpretation of HTTP requests (HTTP request/response smuggling) vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-62886High
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-62871High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-58641High
An integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-50659Medium
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
- CVE-2026-50651High
A resource allocation without limits or throttling vulnerability in .NET allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-50649High
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-50528High
An incorrect authorization vulnerability has been discovered in .NET that allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-50526High
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
- CVE-2026-50525High
The .NET platform does not limit resource allocation, allowing an unauthorized attacker to perform a denial-of-service attack over a network.
- CVE-2026-47304High
A vulnerability in .NET due to improper verification of cryptographic signature allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-47302High
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to remotely cause a denial of service (DoS).
- CVE-2026-45491Medium
An improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.
- CVE-2026-45490High
Improper authorization in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-35433High
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-32177High
A heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-33116High
A vulnerability in .NET, .NET Framework, and Visual Studio causes an infinite loop, allowing an unauthorized attacker to perform a Denial of Service (DoS) attack over a network.
- CVE-2026-32178High
A vulnerability in .NET allows an unauthorized attacker to perform spoofing over a network due to improper neutralization of special elements.
- CVE-2026-26171High
An uncontrolled resource consumption vulnerability in .NET allows an unauthorized attacker to cause a denial of service (DoS) over a network.
- CVE-2024-21404High
A vulnerability in .NET allows denial of service (DoS).
- CVE-2024-21386High
Denial of Service vulnerability in .NET. An attacker could cause a crash of applications using .NET.

