FrançaisIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Multiples vulnérabilités dans Microsoft .Net
Advisory ansehen veröffentlicht 2026-10-14
Eine veröffentlichte Sicherheitsmeldung; die Schwachstellen unten werden von ihr beschrieben.
01
beschreibt (43)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-97801US | high7.5 | — | ||
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network. | ||||
| CVE-2026-97788US | high7.5 | — | ||
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96960US | high7.5 | — | ||
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96959US | high7.5 | — | ||
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96958US | high7.5 | — | ||
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96957US | high8.8 | — | ||
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-96238US | medium6.5 | — | ||
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-96237US | high7.5 | — | ||
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96236US | high7.5 | — | ||
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96235US | high8.8 | — | ||
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96234US | medium5.3 | — | ||
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96233US | high7.5 | — | ||
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96232US | high7.5 | — | ||
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96231US | high7.8 | — | ||
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96229US | medium6.5 | — | ||
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96225US | high7.8 | — | ||
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96224US | high8.8 | — | ||
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96222US | high7.4 | — | ||
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-88092US | critical9.4 | — | ||
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network. | ||||
| CVE-2026-87697US | high8.8 | — | ||
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. | ||||
20 von 43 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan