Veille CVE

Mardi 14 juillet 2026

3 CVE sur 27

  1. CVE-2026-50659 6.5 Moyenne

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

  2. CVE-2026-50526 5.5 Moyenne

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft Visual Studio 2022 version 17.12

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

  3. CVE-2026-50324 5.9 Moyenne

    Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1 · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

    Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.