p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de dotnet10

Vulnerabilidades publicadas para dotnet10 en los últimos 30 días: 26. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 34

  1. CVE-2026-92707

    Media · CVSS 5.3EPSS 0,68%Corrección disponible

    MessagePack: Nested arrays can blow past buffer length limits

    MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared array length before the configured object-graph depth limit rejects the input, while nested array headers can reuse the same trailing unread bytes to satisfy per-header length validation. A comparatively small payload can therefore keep many large arrays alive at once. When an attacker can submit such data repeatedly, the allocations can cause severe managed-heap pressu

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2026-102870

    Alta · CVSS 8.8EPSS 0,91%Corrección disponible

    ASP.NET Core Remote Code Execution Vulnerability

    Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  7. CVE-2026-96957

    Alta · CVSS 8.8EPSS 0,53%Corrección disponible

    .NET Security Feature Bypass Vulnerability

    Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  9. CVE-2026-96237

    Alta · CVSS 7.5EPSS 0,64%Corrección disponible

    .NET Remote Code Execution Vulnerability

    Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  10. CVE-2026-96230

    Alta · CVSS 8.8EPSS 0,95%Corrección disponible

    ASP.NET Core Remote Code Execution Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  12. CVE-2026-96225

    Alta · CVSS 7.8EPSS 0,41%Corrección disponible

    .NET Elevation of Privilege Vulnerability

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  13. CVE-2026-96231

    Alta · CVSS 7.8EPSS 0,41%Corrección disponible

    .NET Elevation of Privilege Vulnerability

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  15. CVE-2026-88092

    Crítica · CVSS 9.4EPSS 0,93%Corrección disponible

    ASP.NET Core Tampering Vulnerability

    Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  16. CVE-2026-96236

    Alta · CVSS 7.5EPSS 1,09%Corrección disponible

    ASP.NET Core Denial of Service Vulnerability

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  17. CVE-2026-70188

    Crítica · CVSS 9.1EPSS 0,94%Corrección disponible

    ASP.NET Core Security Feature Bypass Vulnerability

    Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  18. CVE-2026-70183

    Alta · CVSS 7.5EPSS 0,53%Corrección disponible

    ASP.NET Core Elevation of Privilege Vulnerability

    Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  19. CVE-2026-70181

    Alta · CVSS 7.5EPSS 1,23%Corrección disponible

    ASP.NET Core Denial of Service Vulnerability

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  20. CVE-2026-70179

    Alta · CVSS 7.5EPSS 0,63%Corrección disponible

    ASP.NET Core Elevation of Privilege Vulnerability

    Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

    dotnet10Sistemas operativos
    • Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →