Vulnerabilidades de Nuget

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Nuget: 64 registro(s), com severidade, exploração e correções.

Microsoft.WindowsDesktop.App.Runtime.win-x86 10 Microsoft.WindowsDesktop.App.Runtime.win-x64 10 Microsoft.WindowsDesktop.App.Runtime.win-arm64 10 Microsoft.AspNetCore.App.Runtime.win-arm64 9 Microsoft.AspNetCore.App.Runtime.win-x64 9 Microsoft.AspNetCore.App.Runtime.win-x86 9 Microsoft.NETCore.App.Runtime.linux-arm64 8 Microsoft.NETCore.App.Runtime.osx-x64 8 Microsoft.NETCore.App.Runtime.linux-x64 8 Microsoft.NETCore.App.Runtime.linux-musl-x64 8 Microsoft.NETCore.App.Runtime.linux-musl-arm64 8 Microsoft.NETCore.App.Runtime.linux-arm 8 Microsoft.AspNetCore.App.Runtime.linux-arm 8 Microsoft.AspNetCore.App.Runtime.linux-arm64 8 Microsoft.AspNetCore.App.Runtime.linux-musl-arm 8 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 8 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 8 Microsoft.AspNetCore.App.Runtime.linux-x64 8 Microsoft.AspNetCore.App.Runtime.osx-arm64 8 Microsoft.AspNetCore.App.Runtime.osx-x64 8 Microsoft.NETCore.App.Runtime.osx-arm64 7 Microsoft.NETCore.App.Runtime.linux-musl-arm 7 Microsoft.NETCore.App.Runtime.win-arm64 6 Microsoft.NETCore.App.Runtime.win-x64 6 Microsoft.NETCore.App.Runtime.win-x86 6 CefSharp.Common 5 CefSharp.Wpf.HwndHost 5 CefSharp.Wpf 5 CefSharp.WinForms 5 TinyMCE 4 System.Security.Cryptography.Xml 4 Microsoft.AspNetCore.App.Runtime.win-arm 4 DotNetNuke.Core 3 Microsoft.ChakraCore 3 Microsoft.NETCore.App.Runtime.win-arm 3 System.Security.Cryptography.Pkcs 2 Microsoft.AspNetCore.Components.WebAssembly.Server 2 Microsoft.Native.Quic.MsQuic.Schannel 2 CefSharp.Common.NETCore 1 OPCFoundation.NetStandard.Opc.Ua.Bindings.Https 1

Somente exploradas (KEV) →

CVE-2026-96960 Alta · 7.5 CWE-405 13/10/2026

.NET Denial of Service Vulnerability

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-96959 Alta · 7.5 CWE-770 13/10/2026

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-96958 Alta · 7.5 CWE-407 13/10/2026

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-96236 Alta · 7.5 CWE-770 13/10/2026

ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-96235 Alta · 8.8 CWE-787 13/10/2026

.NET Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96234 Média · 5.3 CWE-346 13/10/2026

.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-96233 Alta · 7.5 CWE-787 13/10/2026

ASP.NET Core Denial of Service Vulnerability

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-96232 Alta · 7.5 CWE-125 13/10/2026

.NET Information Disclosure Vulnerability

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-96231 Alta · 7.8 CWE-59 13/10/2026

.NET Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-96230 Alta · 8.8 CWE-79 13/10/2026

ASP.NET Core Remote Code Execution Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

CVE-2026-96225 Alta · 7.8 CWE-59 13/10/2026

.NET Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-96224 Alta · 8.8 CWE-787 13/10/2026

.NET Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96222 Alta · 7.4 CWE-295 13/10/2026

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-88092 Crítica · 9.4 CWE-444 13/10/2026

ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

CVE-2026-87697 Alta · 8.8 CWE-502 13/10/2026

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-85790 Média · 5.9 CWE-416 13/10/2026

Microsoft QUIC Information Disclosure Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

CVE-2026-85363 Alta · 8.8 CWE-190 13/10/2026

.NET Framework Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-84008 Alta · 7.5 CWE-407 13/10/2026

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-83520 Alta · 8.8 CWE-502 13/10/2026

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70197 Alta · 8.1 CWE-787 13/10/2026

.NET Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70196 Média · 5.9 CWE-407 13/10/2026

ASP.NET Core Denial of Service Vulnerability

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-70194 Média · 6.5 CWE-295 13/10/2026

.NET Framework Security Feature Bypass Vulnerability

Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70188 Crítica · 9.1 CWE-444 13/10/2026

ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70186 Alta · 7.5 CWE-833 13/10/2026

ASP.NET Core Denial of Service Vulnerability

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-70183 Alta · 7.5 CWE-362 13/10/2026

ASP.NET Core Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.