Veille CVE

Mardi 12 mai 2026

4 CVE

Critique 0 Élevée 3 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft .NET 10.0 » ✕
  1. CVE-2026-42899 7.5 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Red Hat Enterprise Linux 10

    Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  2. CVE-2026-35433 7.3 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

  3. CVE-2026-32177 7.3 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

  4. CVE-2026-32175 4.3 Moyenne

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft Visual Studio 2022 version 17.12

    A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.