NuGet System.Security.Cryptography.Xml
ProduktUSpkg:nuget/System.Security.Cryptography.Xml
Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.
0
KEV-gelistet
0
öffentlicher Exploit
0
EPSS ≥ 10%
0
ungepatcht
nach Schweregrad
1critical6high0medium0low
aktualisiert 2026-10-31
01
Schwachstellen (15)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||||
|---|---|---|---|---|---|---|
| CVE-2018-0764US | high7.5 | — | ||||
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to th… | ||||||
| CVE-2018-0765US | high7.5 | — | ||||
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft… | ||||||
| CVE-2022-34716US | — | — | ||||
.NET Spoofing Vulnerability | ||||||
| CVE-2026-33116US | — | — | ||||
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network. | ||||||
| CVE-2026-32203US | — | — | ||||
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. | ||||||
| CVE-2026-26171US | — | — | ||||
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network. | ||||||
| CVE-2026-96960US | high7.5 | — | ||||
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | ||||||
| CVE-2026-96958US | high7.5 | — | ||||
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | ||||||
| CVE-2026-50648US | — | — | ||||
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. | ||||||
| CVE-2026-50527US | — | — | ||||
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | ||||||
| CVE-2026-50525US | — | — | ||||
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | ||||||
| CVE-2026-47302US | — | — | ||||
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | ||||||
| CVE-2026-96959US | high7.5 | — | ||||
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | ||||||
| CVE-2026-96222US | high7.4 | — | ||||
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | ||||||
| CVE-2026-47304US | critical9.8OT erhöht | — | ||||
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | ||||||
02
Schwächen (8)
Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.
- CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
- CWE-400Uncontrolled Resource Consumption3 CVEs
- CWE-611Improper Restriction of XML External Entity Reference3 CVEs
- CWE-121Stack-based Buffer Overflow2 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-776Improper Restriction of Recursive Entity References in DTDs2 CVEs
- CWE-290Authentication Bypass by Spoofing1 CVEs
- CWE-295Improper Certificate Validation1 CVEs
03
Datenquellen (1)
Welche Quellen diesen Datensatz belegen und wann.
- USOSV.dev15 CVEs
scry
Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan