.NET Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
PatchFirst · Aktuelle Sicherheitslücken
In den letzten 30 Tagen veröffentlichte Sicherheitslücken für dotnet7: 48. Davon im KEV-Katalog: 1.
Sicherheitslücken: 140
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.