NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Microsoft Developer Tools
view advisory published 2026-10-13
Microsoft heeft kwetsbaarheden verholpen in diverse componenten van de Developer Tools, zoals .NET en Visual Studio.
01
describes (62)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-70098US | high8.8OT elevated | — | ||
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-102238US | critical9.6 | — | ||
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-102235US | high8.8 | — | ||
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-102234US | high7.4 | — | ||
Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-96960US | high7.5 | — | ||
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96959US | high7.5 | — | ||
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96958US | high7.5 | — | ||
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96957US | high8.8 | — | ||
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-96238US | medium6.5 | — | ||
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-96237US | high7.5 | — | ||
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96236US | high7.5 | — | ||
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96235US | high8.8 | — | ||
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96234US | medium5.3 | — | ||
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96233US | high7.5 | — | ||
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96232US | high7.5 | — | ||
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96231US | high7.8 | — | ||
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96230US | high8.8 | Exploit | ||
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96229US | medium6.5 | — | ||
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96225US | high7.8 | — | ||
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96224US | high8.8 | — | ||
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | ||||
showing 20 of 62
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan