Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: languages Tag: net Clear

ID	Title	Severity	Tags	Detected
CVE-2026-58641	Vulnerability in csharp (CVE-2026-58641) vulnerability in csharp (CVE-2026-58641). Successful exploitation can lead to full system takeover.	High	C# Cwe 190 Microsoft Net +5	2 weeks ago
CVE-2026-70354	Out-of-Bounds Write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354) out-of-bounds write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.	High	C# Cwe 787 Microsoft Visual Studio 2022 +17	2 weeks ago
CVE-2026-62899	Vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62899) vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62899). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.30` or later.	Medium	C# Cwe 444 Microsoft Visual Studio 2022 +7	2 weeks ago
CVE-2026-62900	Vulnerability in csharp (CVE-2026-62900) vulnerability in csharp (CVE-2026-62900). Confidential information can be exposed externally.	Medium	C# Cwe 212 Microsoft Visual Studio 2022 +7	2 weeks ago
CVE-2026-62901	Vulnerability in Microsoft.NETCore.App.Runtime.win-arm64 (CVE-2026-62901) vulnerability in Microsoft.NETCore.App.Runtime.win-arm64 (CVE-2026-62901). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.30` or later.	High	C# Cwe 606 Microsoft Visual Studio 2022 +7	2 weeks ago
CVE-2026-62902	Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62902) vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62902). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.30` or later.	Medium	C# Cwe 693 Cwe 829 Cwe 918 +5	2 weeks ago
CVE-2026-62909	Vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909) vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.	High	C# Cwe 248 Cwe 252 Microsoft +8	2 weeks ago
CVE-2026-62897	Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62897) vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62897). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.	High	C# Cwe 190 Microsoft Net Framework +6	2 weeks ago
CVE-2026-62886	Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62886) vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62886). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.	High	C# Cwe 122 Cwe 190 Microsoft +4	2 weeks ago
CVE-2026-62871	Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62871) vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62871). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.	High	C# Cwe 122 Cwe 787 Microsoft +8	2 weeks ago
CVE-2026-50659	Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50659) vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50659). Data can be tampered with by attackers. Mitigation: upgrade to `8.0.29` or later.	Medium	C# Cwe 116 Microsoft Net Framework +20	1 month ago
CVE-2026-50651	Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50651) vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50651). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.29` or later.	High	C# Cwe 770 Microsoft Net +7	1 month ago
CVE-2026-50650	Code Injection in Microsoft.WindowsDesktop.App.Runtime.win-x64 (CVE-2026-50650) code injection in Microsoft.WindowsDesktop.App.Runtime.win-x64 (CVE-2026-50650). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.	High	C# Cwe 94 Microsoft Net Framework +14	1 month ago
CVE-2026-50649	Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.	High	C# Insecure Deserialization Cwe 502 Microsoft +16	1 month ago
CVE-2026-50527	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-50527) vulnerability in System.Security.Cryptography.Xml (CVE-2026-50527). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.	High	C# Cwe 121 Microsoft Net Framework +20	1 month ago
CVE-2026-50526	Vulnerability in Microsoft.NET.Build.Containers (CVE-2026-50526) vulnerability in Microsoft.NET.Build.Containers (CVE-2026-50526). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.	High	C# Cwe 59 Cwe 345 Microsoft +8	1 month ago
CVE-2026-50525	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-50525) vulnerability in System.Security.Cryptography.Xml (CVE-2026-50525). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.	High	C# Cwe 770 Microsoft Net Framework +20	1 month ago
CVE-2026-50524	Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50524) vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50524). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.29` or later.	High	C# Cwe 1287 Microsoft Net +7	1 month ago
CVE-2026-50528	Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50528) vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50528). Data can be tampered with by attackers. Mitigation: upgrade to `8.0.29` or later.	High	C# Cwe 302 Cwe 636 Cwe 863 +9	1 month ago
CVE-2026-50646	Unsafe Deserialization in csharp (CVE-2026-50646) vulnerability in csharp (CVE-2026-50646). Successful exploitation can lead to full system takeover.	High	C# Cwe 502 Cwe 693 Microsoft +17	1 month ago
CVE-2026-50648	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-50648) vulnerability in System.Security.Cryptography.Xml (CVE-2026-50648). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.	High	C# Cwe 770 Microsoft Net Framework +20	1 month ago
CVE-2026-47300	Vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47300) vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47300). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.	High	C# Cwe 303 Microsoft Net +7	1 month ago
CVE-2026-47302	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-47302) vulnerability in System.Security.Cryptography.Xml (CVE-2026-47302). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.	High	C# Cwe 770 Microsoft Net Framework +20	1 month ago
CVE-2026-47303	Vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303) vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.	High	C# Authentication Bypass Cwe 90 Cwe 302 +10	1 month ago
CVE-2026-47304	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-47304) vulnerability in System.Security.Cryptography.Xml (CVE-2026-47304). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.4` or later.	High	C# Cwe 345 Cwe 347 Microsoft +24	1 month ago
CVE-2026-57108	Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-57108) vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-57108). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.29` or later.	High	C# Cwe 843 Microsoft Net +5	1 month ago
CVE-2026-56170	Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2026-56170) vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2026-56170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26` or later.	High	C# Cwe 770 Microsoft Net +5	1 month ago
CVE-2026-45490	.NET SDK Elevation of Privilege Vulnerability .NET SDK Elevation of Privilege Vulnerability	High	C# Cwe 285 Cwe 863 Microsoft +3	2 months ago
CVE-2026-45591	Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-x64 (CVE-2026-45591) vulnerability in Microsoft.AspNetCore.App.Runtime.linux-x64 (CVE-2026-45591). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.0.9` or later.	High	C# Cwe 400 Microsoft Aspnet Core +8	2 months ago
CVE-2026-45491	Vulnerability in Microsoft.NETCore.App.Runtime.linux-x64 (CVE-2026-45491) vulnerability in Microsoft.NETCore.App.Runtime.linux-x64 (CVE-2026-45491). Data can be tampered with by attackers. Mitigation: upgrade to `10.0.9` or later.	Medium	C# Cwe 59 Microsoft Net +5	2 months ago
CVE-2026-42899	Vulnerability in dotnet (CVE-2026-42899) vulnerability in dotnet (CVE-2026-42899). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.27, 9.0.16, 10.0.8` or later.	High	C# Cwe 835 Microsoft Net +5	3 months ago
CVE-2026-35433	Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-35433) vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-35433). Confidential information can be exposed externally. Mitigation: upgrade to `10.0.8` or later.	High	C# Cwe 20 Cwe 190 Microsoft +15	3 months ago
CVE-2026-32175	Path Traversal in Microsoft.NetCore.App.Runtime.win-arm (CVE-2026-32175) path traversal in Microsoft.NetCore.App.Runtime.win-arm (CVE-2026-32175). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.0.8` or later.	Medium	C# Cwe 36 Cwe 22 Microsoft +4	3 months ago
CVE-2026-32177	Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.	High	C# Cwe 20 Cwe 122 Cwe 787 +20	3 months ago
CVE-2026-42245	Vulnerability in net-imap (CVE-2026-42245) vulnerability in net-imap (CVE-2026-42245). Risk of unauthorized operations or information disclosure. Exploitable via ``ResponseReader``. Mitigation: upgrade to `0.4.24` or later.	High	Ruby Denial of Service Cwe 407 Ruby Lang +1	3 months ago
CVE-2026-42246	Vulnerability in net-imap (CVE-2026-42246) vulnerability in net-imap (CVE-2026-42246). Confidential information can be exposed externally. Exploitable via ``STARTTLS``. Mitigation: upgrade to `0.3.10` or later.	High	Ruby Cwe 392 Cwe 393 Cwe 636 +5	3 months ago
CVE-2026-42256	Vulnerability in net-imap (CVE-2026-42256) vulnerability in net-imap (CVE-2026-42256). Risk of unauthorized operations or information disclosure. Exploitable via ``Timeout``. Mitigation: upgrade to `0.4.24` or later.	Medium	Ruby Cwe 770 Cwe 1322 Ruby Lang +1	3 months ago
CVE-2026-42257	Command Injection in net-imap (CVE-2026-42257) command injection in net-imap (CVE-2026-42257). Successful exploitation can lead to full system takeover. Exploitable via ``CRLF``. Mitigation: upgrade to `0.4.24` or later.	Critical	Ruby Cwe 77 Cwe 93 Ruby Lang +1	3 months ago
CVE-2026-42258	Command Injection in net-imap (CVE-2026-42258) command injection in net-imap (CVE-2026-42258). Data can be tampered with by attackers. Exploitable via ``flag``. Mitigation: upgrade to `0.4.24` or later.	Medium	Ruby Cwe 77 Cwe 93 Ruby Lang +1	3 months ago
CVE-2026-32178	Vulnerability in dotnet (CVE-2026-32178) vulnerability in dotnet (CVE-2026-32178). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.	High	C# Cwe 138 Microsoft Net +6	3 months ago
CVE-2026-26171	Vulnerability in dotnet (CVE-2026-26171) vulnerability in dotnet (CVE-2026-26171). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.	High	C# Cwe 400 Cwe 611 Cwe 776 +8	3 months ago
CVE-2026-33116	Vulnerability in dotnet-sdk (CVE-2026-33116) vulnerability in dotnet-sdk (CVE-2026-33116). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.	High	C# Cwe 20 Cwe 400 Cwe 835 +22	4 months ago
CVE-2026-32203	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-32203) vulnerability in System.Security.Cryptography.Xml (CVE-2026-32203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.3` or later.	High	C# Cwe 20 Cwe 121 Cwe 787 +9	4 months ago
CVE-2023-44487 KEV	[KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487) vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.	High	Ietf Http2 Cwe 400 Denial of Service +343	2 years ago
CVE-2023-38180 KEV	[KEV] Vulnerability in Microsoft net-core-and-visual-studio (CVE-2023-38180) vulnerability in Microsoft net-core-and-visual-studio (CVE-2023-38180). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Net Core And Visual Studio C# Denial of Service +6	3 years ago
CVE-2023-35391	ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability	Medium	C# Microsoft Net Aspnet Core +1	3 years ago
CVE-2023-38178	.NET Core and Visual Studio Denial of Service Vulnerability .NET Core and Visual Studio Denial of Service Vulnerability	High	C# Denial of Service Cwe 400 Microsoft +2	3 years ago
CVE-2023-35390	.NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability	High	C# Remote Code Execution Cwe 77 Microsoft +2	3 years ago
CVE-2023-21808	.NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability	High	C# Remote Code Execution Cwe 416 Microsoft +25	3 years ago
CVE-2022-38013	Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-38013) vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-38013). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.9` or later.	High	C# Denial of Service Cwe 400 Microsoft +6	3 years ago

Vulnerabilities

🍪 About cookies