Vulnerabilidades do Microsoft .NET 8.0

CVE-2026-96238 Média · 6.5 CWE-346 13/10/2026

.NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-96237 Alta · 7.5 CWE-829 13/10/2026

.NET Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96235 Alta · 8.8 CWE-787 13/10/2026

.NET Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96234 Média · 5.3 CWE-346 13/10/2026

.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-96233 Alta · 7.5 CWE-787 13/10/2026

ASP.NET Core Denial of Service Vulnerability

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-96232 Alta · 7.5 CWE-125 13/10/2026

.NET Information Disclosure Vulnerability

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-96231 Alta · 7.8 CWE-59 13/10/2026

.NET Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-96229 Média · 6.5 CWE-183 13/10/2026

.NET Information Disclosure Vulnerability

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-96225 Alta · 7.8 CWE-59 13/10/2026

.NET Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-96224 Alta · 8.8 CWE-787 13/10/2026

.NET Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-87697 Alta · 8.8 CWE-502 13/10/2026

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-85363 Alta · 8.8 CWE-190 13/10/2026

.NET Framework Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83520 Alta · 8.8 CWE-502 13/10/2026

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70197 Alta · 8.1 CWE-787 13/10/2026

.NET Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70174 Alta · 8.8 CWE-358 13/10/2026

.NET Remote Code Execution Vulnerability

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70035 Alta · 8.8 CWE-502 13/10/2026

.NET Framework Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-70007 Alta · 8.8 CWE-787 13/10/2026

.NET Framework Remote Code Execution Vulnerability

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-69651 Alta · 7.5 CWE-407 13/10/2026

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-66822 Média · 5.9 CWE-201 13/10/2026

.NET Information Disclosure Vulnerability

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-58280 Alta · 7.5 CWE-674 13/10/2026

.NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-105016 Crítica · 9.8 CWE-122 13/10/2026

Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

CVE-2026-58649 Média · 6.5 CWE-346 08/09/2026

.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-71328 Alta · 8.8 CWE-122 08/09/2026

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-69304 Média · 5.9 CWE-409 08/09/2026

ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-69439 Alta · 8.8 CWE-122 08/09/2026

.NET and Visual Studio Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.