Microsoft .NET 8.0 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft .NET 8.0: 57 record(s), with affected versions and fixes.
CVE-2026-96238
Medium · 6.5
CWE-346 Oct 13, 2026
.NET Security Feature Bypass Vulnerability
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96237
High · 7.5
CWE-829 Oct 13, 2026
.NET Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-96235
High · 8.8
CWE-787 Oct 13, 2026
.NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-96234
Medium · 5.3
CWE-346 Oct 13, 2026
.NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96233
High · 7.5
CWE-787 Oct 13, 2026
ASP.NET Core Denial of Service Vulnerability
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-96232
High · 7.5
CWE-125 Oct 13, 2026
.NET Information Disclosure Vulnerability
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96231
High · 7.8
CWE-59 Oct 13, 2026
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-96229
Medium · 6.5
CWE-183 Oct 13, 2026
.NET Information Disclosure Vulnerability
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96225
High · 7.8
CWE-59 Oct 13, 2026
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-96224
High · 8.8
CWE-787 Oct 13, 2026
.NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-87697
High · 8.8
CWE-502 Oct 13, 2026
.NET Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-85363
High · 8.8
CWE-190 Oct 13, 2026
.NET Framework Elevation of Privilege Vulnerability
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83520
High · 8.8
CWE-502 Oct 13, 2026
.NET Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70197
High · 8.1
CWE-787 Oct 13, 2026
.NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70174
High · 8.8
CWE-358 Oct 13, 2026
.NET Remote Code Execution Vulnerability
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70035
High · 8.8
CWE-502 Oct 13, 2026
.NET Framework Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
CVE-2026-70007
High · 8.8
CWE-787 Oct 13, 2026
.NET Framework Remote Code Execution Vulnerability
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
CVE-2026-69651
High · 7.5
CWE-407 Oct 13, 2026
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-66822
Medium · 5.9
CWE-201 Oct 13, 2026
.NET Information Disclosure Vulnerability
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-58280
High · 7.5
CWE-674 Oct 13, 2026
.NET Denial of Service Vulnerability
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-105016
Critical · 9.8
CWE-122 Oct 13, 2026
Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-71328
High · 8.8
CWE-122 Sep 8, 2026
.NET and Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-69522
High · 8.8
CWE-122 Sep 8, 2026
.NET and Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-69439
High · 8.8
CWE-122 Sep 8, 2026
.NET and Visual Studio Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69304
Medium · 5.9
CWE-409 Sep 8, 2026
ASP.NET Core Denial of Service Vulnerability
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.