Security feed

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.