Aller au contenu

Vulnérabilités de Microsoft .NET 9.0 runtime

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-71328 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network 8.8 Élevée 8 sept. 2026
CVE-2026-69304 Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny… 5.9 Moyenne 8 sept. 2026
CVE-2026-58649 Origin validation error in .NET allows an unauthorized attacker to disclose information over a network 6.5 Moyenne 8 sept. 2026
CVE-2026-69439 Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a… 8.8 Élevée 8 sept. 2026
CVE-2026-69522 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network 8.8 Élevée 8 sept. 2026
CVE-2026-62898 Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network 7.5 Élevée 11 août 2026
CVE-2026-70354 Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally 7.8 Élevée 11 août 2026
CVE-2026-62871 Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally 7.8 Élevée 11 août 2026
CVE-2026-62909 Uncaught exception in .NET allows an authorized attacker to elevate privileges locally 7.8 Élevée 11 août 2026
CVE-2026-62902 Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information… 6.5 Moyenne 11 août 2026
CVE-2026-62901 Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network 7.5 Élevée 11 août 2026
CVE-2026-62899 Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker… 5.9 Moyenne 11 août 2026
CVE-2026-62900 Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose… 5.9 Moyenne 11 août 2026
CVE-2026-62897 Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally 7.0 Élevée 11 août 2026
CVE-2026-50659 Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network 6.5 Moyenne 14 juil. 2026
CVE-2026-50651 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a… 7.5 Élevée 14 juil. 2026
CVE-2026-50650 Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate… 7.8 Élevée 14 juil. 2026
CVE-2026-50648 Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service… 7.5 Élevée 14 juil. 2026
CVE-2026-50649 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally 7.8 Élevée 14 juil. 2026
CVE-2026-50528 Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network 8.2 Élevée 14 juil. 2026
CVE-2026-50646 Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally 7.8 Élevée 14 juil. 2026
CVE-2026-50527 Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network 7.5 Élevée 14 juil. 2026
CVE-2026-50525 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a… 7.5 Élevée 14 juil. 2026
CVE-2026-50526 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform… 7.0 Élevée 14 juil. 2026
CVE-2026-50524 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over… 7.5 Élevée 14 juil. 2026

Autres produits Microsoft