FrançaisShown in its original language — a full translation is planned for a future version.
Multiples vulnérabilités dans Microsoft .Net
view advisory published 2026-10-14
A published security advisory; the vulnerabilities below are the ones it describes.
01
describes (43)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-97801US | high7.5 | — | ||
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network. | ||||
| CVE-2026-97788US | high7.5 | — | ||
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96960US | high7.5 | — | ||
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96959US | high7.5 | — | ||
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96958US | high7.5 | — | ||
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96957US | high8.8 | — | ||
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-96238US | medium6.5 | — | ||
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-96237US | high7.5 | — | ||
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96236US | high7.5 | — | ||
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96235US | high8.8 | — | ||
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96234US | medium5.3 | — | ||
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96233US | high7.5 | — | ||
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96232US | high7.5 | — | ||
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96231US | high7.8 | — | ||
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96229US | medium6.5 | — | ||
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96225US | high7.8 | — | ||
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96224US | high8.8 | — | ||
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96222US | high7.4 | — | ||
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-88092US | critical9.4 | — | ||
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network. | ||||
| CVE-2026-87697US | high8.8 | — | ||
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. | ||||
showing 20 of 43
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan