CVE-2026-96234

.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft Redhat

Products

.net Microsoft Visual Studio 2026 Version 18.10 Visual Studio 2022 and 1 more

CVE-2026-96233

ASP.NET Core Denial of Service Vulnerability

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

.net .net Framework

CVE-2026-83520

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

.net .net Framework Microsoft Visual Studio 2026 Version 18.10 and 1 more

CVE-2026-70190

.NET Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

.net Microsoft Visual Studio 2026 Version 18.10 Visual Studio 2022

CVE-2026-96958

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Apple Linux Microsoft

Products

Macos Linux Kernel .net and 17 more

CVE-2026-96959

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Apple Linux Microsoft

Products

Macos Linux Kernel .net and 17 more

CVE-2026-96960

.NET Denial of Service Vulnerability

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Apple Linux Microsoft

Products

Macos Linux Kernel .net and 17 more

CVE-2026-97801

.NET Framework Tampering Vulnerability

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

.net .net Framework

CVE-2026-108398

.NET Framework Security Feature Bypass Vulnerability

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

.net .net Framework

CVE-2026-96232

.NET Information Disclosure Vulnerability

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

.net Microsoft Visual Studio 2026 Version 18.10 Visual Studio 2022

CVE-2022-21986

.NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.6% KEV · Not listed

Vendors

Fedoraproject Microsoft Redhat

Products

Fedora .net Visual Studio 2019 and 3 more

CVE-2021-34485

.NET Core and Visual Studio Information Disclosure Vulnerability

.NET Core and Visual Studio Information Disclosure Vulnerability

CVSS 3.1 · 5 Medium EPSS 2.1% KEV · Not listed

Vendors

Microsoft Redhat

Products

.net .net Core Powershell Core and 4 more

CVE-2021-31957

ASP.NET Core Denial of Service Vulnerability

ASP.NET Core Denial of Service Vulnerability

CVSS 3.1 · 5.9 Medium EPSS 5.1% KEV · Not listed

Vendors

Fedoraproject Microsoft Redhat

Products

Fedora .net .net Core and 3 more

CVE-2021-31204

.NET and Visual Studio Elevation of Privilege Vulnerability

.NET and Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1 · 7.3 High EPSS 1.2% KEV · Not listed

Vendors

Fedoraproject Microsoft Redhat

Products

Fedora .net .net Core and 3 more

CVE-2021-24112

.NET Core Remote Code Execution Vulnerability

.NET Core Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 3.5% KEV · Not listed

Vendors

Microsoft

Products

.net .net Core Mono and 1 more

CVE-2026-58649

.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple Linux Microsoft

Products

Macos Linux Kernel .net and 6 more

CVE-2026-69304

ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

.net Asp.net Core Microsoft Visual Studio 2022 and 4 more

CVE-2026-69806

.NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Linux Microsoft

Products

Linux Kernel .net Visual Studio 2022 and 1 more

CVE-2026-69439

.NET and Visual Studio Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

.net Microsoft Visual Studio 2022 Microsoft Visual Studio 2026 and 3 more

CVE-2026-71328

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

.net Visual Studio 2022 Visual Studio 2026 and 1 more