Microsoft .NET 10.0 vulnerabilities, page 3
67 vulnerabilities
Known vulnerabilities in Microsoft .NET 10.0, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-47302chainguardaspnet-8-targeting-pack+48
EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-42899chainguarddotnet-bootstrap-8+70EPSS score2.44%
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-56170ubuntudotnet10+20EPSS score1.17%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-58649ubuntudotnet10+39EPSS score0.27%
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-57108chainguarddotnet-bootstrap-8+19EPSS score1.17%
Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-69522ubuntudotnet7+14EPSS score0.91%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2026-69806ubuntudotnet10+10EPSS score0.76%
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-69304chainguardaspnet-8-targeting-pack+48EPSS score0.88%
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-69439ubuntudotnet7+10EPSS score0.84%
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.CVE-2026-45491chainguarddotnet-bootstrap-8+15EPSS score0.37%
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.CVE-2026-45490ubuntudotnet7+4EPSS score0.42%
Improper authorization in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-45591chainguarddotnet-bootstrap-8+22EPSS score2.44%
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-70354ubuntudotnet7+20EPSS score0.36%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.CVE-2026-32178chainguarddotnet-bootstrap-8+27EPSS score2.09%
Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.CVE-2026-32203ubuntudotnet10+14EPSS score2.44%
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.CVE-2026-32177ubuntudotnet7+16EPSS score0.57%
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-32175ubuntudotnet7+13EPSS score0.64%
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.
To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system.
The security update fixes the vulnerability by ensuring .NET Core properly handles files.CVE-2026-50524chainguarddotnet-bootstrap-8+28EPSS score1.23%
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50648chainguardaspnet-8-targeting-pack+36EPSS score1.17%
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50651chainguarddotnet-bootstrap-8+28EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.