Aller au contenu

Vulnérabilités de Microsoft .NET 9.0 runtime

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-105016 Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network 9.8 Critique 13 oct. 2026
CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network 7.5 Élevée 13 oct. 2026
CVE-2026-96229 Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network 6.5 Moyenne 13 oct. 2026
CVE-2026-96231 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate… 7.8 Élevée 13 oct. 2026
CVE-2026-96232 Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network 7.5 Élevée 13 oct. 2026
CVE-2026-96233 Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network 7.5 Élevée 13 oct. 2026
CVE-2026-96234 Origin validation error in .NET allows an unauthorized attacker to disclose information over a network 5.3 Moyenne 13 oct. 2026
CVE-2026-96235 Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-96237 Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over… 7.5 Élevée 13 oct. 2026
CVE-2026-96225 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate… 7.8 Élevée 13 oct. 2026
CVE-2026-96238 Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network 6.5 Moyenne 13 oct. 2026
CVE-2026-70007 Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-70035 Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-83520 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-85363 Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network 8.8 Élevée 13 oct. 2026
CVE-2026-96224 Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-70161 Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker… 7.3 Élevée 13 oct. 2026
CVE-2026-70197 Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network 8.1 Élevée 13 oct. 2026
CVE-2026-70165 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate… 6.7 Moyenne 13 oct. 2026
CVE-2026-70190 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate… 7.3 Élevée 13 oct. 2026
CVE-2026-70174 Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a… 8.8 Élevée 13 oct. 2026
CVE-2026-87697 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network 8.8 Élevée 13 oct. 2026
CVE-2026-66822 Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a… 5.9 Moyenne 13 oct. 2026
CVE-2026-69651 Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network 7.5 Élevée 13 oct. 2026
CVE-2026-69806 Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges… 7.0 Élevée 8 sept. 2026

Autres produits Microsoft