Veille CVE

Mercredi 15 juillet 2026

3 CVE

  1. CVE-2026-42899 7.5 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Red Hat Enterprise Linux 10

    Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  2. CVE-2026-35433 7.3 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

  3. CVE-2026-32177 7.3 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.