.NET Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
PatchFirst · Vulnérabilités récentes
Vulnérabilités publiées pour dotnet7 au cours des 30 derniers jours : 48. Présentes dans le catalogue KEV : 1.
Vulnérabilités : 140
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.