Veille CVE

Mardi 13 octobre 2026

6 CVE sur 25

  1. CVE-2026-96238 6.5 Moyenne

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

  2. CVE-2026-96234 5.3 Moyenne

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

  3. CVE-2026-96229 6.5 Moyenne

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

  4. CVE-2026-70194 6.5 Moyenne

    Microsoft .NET 11.0 runtime · Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10

    Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.

  5. CVE-2026-70165 6.7 Moyenne

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 9.0 runtime · Microsoft Visual Studio 2022 version 17.14

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-66822 5.9 Moyenne

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.