Vulnerabilidades do Microsoft Microsoft .NET Framework 4.8

CVE-2026-97801 Alta · 7.5 CWE-1287 13/10/2026

.NET Framework Tampering Vulnerability

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

CVE-2026-97788 Alta · 7.5 CWE-203 13/10/2026

Active Directory Federation Services (AD FS) Information Disclosure Vulnerability

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-96960 Alta · 7.5 CWE-405 13/10/2026

.NET Denial of Service Vulnerability

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-96959 Alta · 7.5 CWE-770 13/10/2026

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-96958 Alta · 7.5 CWE-407 13/10/2026

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-96233 Alta · 7.5 CWE-787 13/10/2026

ASP.NET Core Denial of Service Vulnerability

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-96224 Alta · 8.8 CWE-787 13/10/2026

.NET Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96222 Alta · 7.4 CWE-295 13/10/2026

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-85363 Alta · 8.8 CWE-190 13/10/2026

.NET Framework Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-84008 Alta · 7.5 CWE-407 13/10/2026

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-83520 Alta · 8.8 CWE-502 13/10/2026

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70174 Alta · 8.8 CWE-358 13/10/2026

.NET Remote Code Execution Vulnerability

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70035 Alta · 8.8 CWE-502 13/10/2026

.NET Framework Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-70007 Alta · 8.8 CWE-787 13/10/2026

.NET Framework Remote Code Execution Vulnerability

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-69651 Alta · 7.5 CWE-407 13/10/2026

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-58280 Alta · 7.5 CWE-674 13/10/2026

.NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-108398 Alta · 8.8 CWE-426 13/10/2026

.NET Framework Security Feature Bypass Vulnerability

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

CVE-2026-102869 Alta · 8.8 CWE-843 13/10/2026

.NET and Visual Studio Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69522 Alta · 8.8 CWE-122 08/09/2026

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-50659 Média · 6.5 CWE-116 14/07/2026

.NET Spoofing Vulnerability

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

CVE-2026-35433 Alta · 7.3 CWE-20 12/05/2026

.NET Elevation of Privilege Vulnerability

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

CVE-2026-32177 Alta · 7.3 CWE-20 12/05/2026

.NET Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

CVE-2026-33116 Alta · 7.5 CWE-20 14/04/2026

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

CVE-2026-32226 Média · 5.9 CWE-362 14/04/2026

.NET Framework Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.

CVE-2026-23666 Alta · 7.5 CWE-755 14/04/2026

.NET Framework Denial of Service Vulnerability

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.