Mardi 13 octobre 2026

Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime · Microsoft Visual Studio 2022 version 17.14

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 11.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10 · Microsoft.AspNetCore.Components.WebAssembly.Server

Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 9.0 runtime · Microsoft Visual Studio 2022 version 17.14

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 11.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10 · Microsoft.AspNetCore.Authentication.Negotiate

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Microsoft ASP.NET Core 10.0 · Microsoft ASP.NET Core 8.0 · Microsoft ASP.NET Core 9.0 · Microsoft Visual Studio 2022 version 17.14

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 9.0 runtime · Microsoft Visual Studio 2022 version 17.14

Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.

Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10 · Microsoft.AspNetCore.SignalR.Common · Microsoft.AspNetCore.SignalR.Core

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10 · Microsoft.AspNetCore.Components.WebAssembly.Server

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.