Microsoft Microsoft .NET Framework 3.5 vulnerabilities

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.

.NET Framework Information Disclosure Vulnerability

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.