Veille CVE

Mardi 11 août 2026

3 CVE sur 9

  1. CVE-2026-62902 6.5 Moyenne

    Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.8

    Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

  2. CVE-2026-62900 5.9 Moyenne

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft Visual Studio 2022 version 17.14

    Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

  3. CVE-2026-62899 5.9 Moyenne

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft Visual Studio 2022 version 17.14

    Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.