Vulnerabilities > Microsoft > NET
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-11-14 | CVE-2023-36049 | Unspecified vulnerability in Microsoft .Net and .Net Framework .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 9.8 |
2023-10-10 | CVE-2023-44487 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | 7.5 |
2023-08-08 | CVE-2023-35391 | Unspecified vulnerability in Microsoft .Net ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability | 7.5 |
2023-06-14 | CVE-2023-33135 | Unspecified vulnerability in Microsoft .Net and Visual Studio 2022 .NET and Visual Studio Elevation of Privilege Vulnerability | 7.3 |
2022-10-11 | CVE-2022-41032 | NuGet Client Elevation of Privilege Vulnerability | 7.8 |
2020-09-15 | CVE-2020-8927 | Classic Buffer Overflow vulnerability in multiple products A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. | 6.5 |
2020-05-21 | CVE-2020-1108 | Unspecified vulnerability in Microsoft products A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'. | 7.5 |