Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-58641 |
|
Vulnerability in csharp (CVE-2026-58641)
vulnerability in csharp (CVE-2026-58641). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62898 |
|
Use-After-Free in Microsoft.NETCore.App.Runtime.win-arm64 (CVE-2026-62898)
vulnerability in Microsoft.NETCore.App.Runtime.win-arm64 (CVE-2026-62898). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-70354 |
|
Out-of-Bounds Write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354)
out-of-bounds write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62899 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62899)
vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62899). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62909 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909)
vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62902 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62902)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62902). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62901 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.win-arm64 (CVE-2026-62901)
vulnerability in Microsoft.NETCore.App.Runtime.win-arm64 (CVE-2026-62901). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62900 |
|
Vulnerability in csharp (CVE-2026-62900)
vulnerability in csharp (CVE-2026-62900). Confidential information can be exposed externally.
|
| CVE-2026-62897 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62897)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62897). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62886 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62886)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62886). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62871 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62871)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62871). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-18089 |
|
Vulnerability in timlegge (CVE-2026-18089)
vulnerability in timlegge (CVE-2026-18089). Data can be tampered with by attackers.
|
| CVE-2026-18092 |
|
Vulnerability in timlegge (CVE-2026-18092)
vulnerability in timlegge (CVE-2026-18092). Data can be tampered with by attackers.
|
| CVE-2026-18108 |
|
Vulnerability in timlegge (CVE-2026-18108)
vulnerability in timlegge (CVE-2026-18108). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50651 |
|
Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50651)
vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50651). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-50649 |
|
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
|
| CVE-2026-50650 |
|
Code Injection in Microsoft.WindowsDesktop.App.Runtime.win-x64 (CVE-2026-50650)
code injection in Microsoft.WindowsDesktop.App.Runtime.win-x64 (CVE-2026-50650). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-50659 |
|
Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50659)
vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50659). Data can be tampered with by attackers. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-50524 |
|
Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50524)
vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50524). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-50528 |
|
Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50528)
vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50528). Data can be tampered with by attackers. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-50525 |
|
Vulnerability in System.Security.Cryptography.Xml (CVE-2026-50525)
vulnerability in System.Security.Cryptography.Xml (CVE-2026-50525). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.
|
| CVE-2026-50526 |
|
Vulnerability in Microsoft.NET.Build.Containers (CVE-2026-50526)
vulnerability in Microsoft.NET.Build.Containers (CVE-2026-50526). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-50527 |
|
Vulnerability in System.Security.Cryptography.Xml (CVE-2026-50527)
vulnerability in System.Security.Cryptography.Xml (CVE-2026-50527). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.
|
| CVE-2026-50646 |
|
Unsafe Deserialization in csharp (CVE-2026-50646)
vulnerability in csharp (CVE-2026-50646). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50648 |
|
Vulnerability in System.Security.Cryptography.Xml (CVE-2026-50648)
vulnerability in System.Security.Cryptography.Xml (CVE-2026-50648). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.
|
| CVE-2026-47304 |
|
Vulnerability in System.Security.Cryptography.Xml (CVE-2026-47304)
vulnerability in System.Security.Cryptography.Xml (CVE-2026-47304). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.4` or later.
|
| CVE-2026-47303 |
|
Vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303)
vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-47302 |
|
Vulnerability in System.Security.Cryptography.Xml (CVE-2026-47302)
vulnerability in System.Security.Cryptography.Xml (CVE-2026-47302). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.
|
| CVE-2026-47300 |
|
Vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47300)
vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47300). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-57108 |
|
Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-57108)
vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-57108). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-56170 |
|
Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2026-56170)
vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2026-56170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26` or later.
|
| CVE-2026-45490 |
|
.NET SDK Elevation of Privilege Vulnerability
.NET SDK Elevation of Privilege Vulnerability
|
| CVE-2026-45591 |
|
Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-x64 (CVE-2026-45591)
vulnerability in Microsoft.AspNetCore.App.Runtime.linux-x64 (CVE-2026-45591). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.0.9` or later.
|
| CVE-2026-45491 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.linux-x64 (CVE-2026-45491)
vulnerability in Microsoft.NETCore.App.Runtime.linux-x64 (CVE-2026-45491). Data can be tampered with by attackers. Mitigation: upgrade to `10.0.9` or later.
|
| CVE-2026-49942 |
|
Vulnerability in rrwo (CVE-2026-49942)
vulnerability in rrwo (CVE-2026-49942). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49941 |
|
Vulnerability in dos (CVE-2026-49941)
vulnerability in dos (CVE-2026-49941). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49940 |
|
Vulnerability in rrwo (CVE-2026-49940)
vulnerability in rrwo (CVE-2026-49940). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46739 |
|
Vulnerability in cosimo (CVE-2026-46739)
vulnerability in cosimo (CVE-2026-46739). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8722 |
|
Vulnerability in team (CVE-2026-8722)
vulnerability in team (CVE-2026-8722). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-25680 |
|
Vulnerability in golang.org/x/net (CVE-2026-25680)
vulnerability in golang.org/x/net (CVE-2026-25680). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.55.0` or later.
|
| CVE-2026-42502 |
|
Vulnerability in golang.org/x/net (CVE-2026-42502)
vulnerability in golang.org/x/net (CVE-2026-42502). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.55.0` or later.
|
| CVE-2026-25681 |
|
Vulnerability in golang.org/x/net (CVE-2026-25681)
vulnerability in golang.org/x/net (CVE-2026-25681). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.55.0` or later.
|
| CVE-2026-39821 |
|
Vulnerability in golang.org/x/net (CVE-2026-39821)
vulnerability in golang.org/x/net (CVE-2026-39821). Confidential information can be exposed externally. Mitigation: upgrade to `0.55.0` or later.
|
| CVE-2026-27136 |
|
Vulnerability in golang.org/x/net (CVE-2026-27136)
vulnerability in golang.org/x/net (CVE-2026-27136). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.55.0` or later.
|
| CVE-2026-42506 |
|
Cross-Site Scripting (XSS) in golang.org/x/net (CVE-2026-42506)
cross-site scripting in golang.org/x/net (CVE-2026-42506). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.55.0` or later.
|
| CVE-2026-42899 |
|
Vulnerability in dotnet (CVE-2026-42899)
vulnerability in dotnet (CVE-2026-42899). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.27, 9.0.16, 10.0.8` or later.
|
| CVE-2026-35433 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-35433)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-35433). Confidential information can be exposed externally. Mitigation: upgrade to `10.0.8` or later.
|
| CVE-2026-32177 |
|
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
|
| CVE-2026-32175 |
|
Path Traversal in Microsoft.NetCore.App.Runtime.win-arm (CVE-2026-32175)
path traversal in Microsoft.NetCore.App.Runtime.win-arm (CVE-2026-32175). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.0.8` or later.
|
| CVE-2026-42258 |
|
Command Injection in net-imap (CVE-2026-42258)
command injection in net-imap (CVE-2026-42258). Data can be tampered with by attackers. Exploitable via ``flag``. Mitigation: upgrade to `0.4.24` or later.
|