Accueil Vulnérabilités récentes dotnet7 PatchFirst · Vulnérabilités récentes
Vulnérabilités de dotnet7 Vulnérabilités publiées pour dotnet7 au cours des 30 derniers jours : 46. Présentes dans le catalogue KEV : 0.
Vous utilisez dotnet7 ? La liste contient 138 vulnérabilités. Découvrez en une minute si un élément de cette liste touche votre serveur — la vérification est gratuite.
Vérifier mon serveur gratuitement MessagePack: Nested arrays can blow past buffer length limits MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared array length before the configured object-graph depth limit rejects the input, while nested array headers can reuse the same trailing unread bytes to satisfy per-header length validation. A comparatively small payload can therefore keep many large arrays alive at once. When an attacker can submit such data repeatedly, the allocations can cause severe managed-heap pressu
Publication 15 octobre 2026 Mise à jour 15 octobre 2026
Microsoft QUIC Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Denial of Service Vulnerability A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.
The update addresses the vulnerability by correcting how the .NET web application handles web requests.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
ASP.NET Core Remote Code Execution Vulnerability Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Denial of Service Vulnerability Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Denial of Service Vulnerability Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Denial of Service Vulnerability Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Denial of Service Vulnerability Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Security Feature Bypass Vulnerability Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Security Feature Bypass Vulnerability Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Remote Code Execution Vulnerability Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Remote Code Execution Vulnerability Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Information Disclosure Vulnerability Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Information Disclosure Vulnerability Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
ASP.NET Core Remote Code Execution Vulnerability Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Information Disclosure Vulnerability Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
ASP.NET Core Denial of Service Vulnerability Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Elevation of Privilege Vulnerability Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Elevation of Privilege Vulnerability Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
.NET Framework Elevation of Privilege Vulnerability Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
Publication 13 octobre 2026 Mise à jour 27 octobre 2026
Vérifiez votre serveur Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.
Vérifiez votre serveur →