NuGet System.Security.Cryptography.Xml

ProduktUS

pkg:nuget/System.Security.Cryptography.Xml

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

0
KEV-gelistet
0
öffentlicher Exploit
0
EPSS ≥ 10%
0
ungepatcht
nach Schweregrad
1critical6high0medium0low
aktualisiert 2026-10-31
01

Schwachstellen (15)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2018-0764UShigh7.5—
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to th…
CVE-2018-0765UShigh7.5—
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft…
CVE-2022-34716US——
.NET Spoofing Vulnerability
CVE-2026-33116US——
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
CVE-2026-32203US——
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.
CVE-2026-26171US——
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96960UShigh7.5—
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96958UShigh7.5—
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50648US——
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50527US——
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50525US——
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-47302US——
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96959UShigh7.5—
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96222UShigh7.4—
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-47304UScritical9.8OT erhöht—
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
02

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

  • CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
  • CWE-400Uncontrolled Resource Consumption3 CVEs
  • CWE-611Improper Restriction of XML External Entity Reference3 CVEs
  • CWE-121Stack-based Buffer Overflow2 CVEs
  • CWE-20Improper Input Validation2 CVEs
  • CWE-776Improper Restriction of Recursive Entity References in DTDs2 CVEs
  • CWE-290Authentication Bypass by Spoofing1 CVEs
  • CWE-295Improper Certificate Validation1 CVEs
03

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan