Aller au contenu

Vulnérabilités de Microsoft .NET 9.0

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-50526 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform… 7.0 Élevée 14 juil. 2026
CVE-2026-50524 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over… 7.5 Élevée 14 juil. 2026
CVE-2026-47303 Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over… 8.8 Élevée 14 juil. 2026
CVE-2026-47304 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature… 8.1 Élevée 14 juil. 2026
CVE-2026-47302 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a… 7.5 Élevée 14 juil. 2026
CVE-2026-47300 Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges… 8.8 Élevée 14 juil. 2026
CVE-2026-57108 Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny… 7.5 Élevée 14 juil. 2026
CVE-2026-56170 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 Élevée 14 juil. 2026
CVE-2026-45591 Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network 7.5 Élevée 9 juin 2026
CVE-2026-45491 Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform… 6.2 Moyenne 9 juin 2026
CVE-2026-45490 Improper authorization in .NET allows an authorized attacker to elevate privileges locally 7.8 Élevée 9 juin 2026
CVE-2026-42899 Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 Élevée 12 mai 2026
CVE-2026-32175 A tampering vulnerability exists when .NET Core improperly handles specially crafted files 4.3 Moyenne 12 mai 2026
CVE-2026-35433 Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally 7.3 Élevée 12 mai 2026
CVE-2026-32177 Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally 7.3 Élevée 12 mai 2026
CVE-2026-32203 Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network 7.5 Élevée 14 avr. 2026
CVE-2026-26171 Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network 7.5 Élevée 14 avr. 2026
CVE-2026-33116 Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized… 7.5 Élevée 14 avr. 2026
CVE-2026-32178 Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network 7.5 Élevée 14 avr. 2026
CVE-2026-26127 Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network 7.5 Élevée 10 mars 2026
CVE-2026-21218 Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network 7.5 Élevée 10 févr. 2026
CVE-2025-55248 Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose… 4.8 Moyenne 14 oct. 2025
CVE-2025-55247 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate… 7.3 Élevée 14 oct. 2025
CVE-2025-30399 Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network 7.5 Élevée 13 juin 2025
CVE-2025-26646 External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized… 8.0 Élevée 13 mai 2025

Autres produits Microsoft