CVE-2026-88092 is a critical HTTP request smuggling vulnerability in Microsoft ASP.NET Core 10.0 and other versions. It arises from inconsistent interpretation of HTTP requests, allowing unauthorized attackers to tamper with network traffic. The flaw affects multiple ASP.NET Core versions prior to their respective fixed releases. A high-severity fix is officially available from Microsoft.
CVE-2026-96236 is a high-severity vulnerability in Microsoft ASP.NET Core 10.0 involving allocation of resources without limits or throttling. This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network by exhausting resources. The issue affects multiple versions of ASP.NET Core, including 8.0, 9.0, 10.0, 11.0, 17.14, and 18.10 branches prior to their respective fixed releases. Microsoft has issued official fixes for all affected versions.
CVE-2026-96222 is a high-severity vulnerability in Microsoft .NET Framework 3.5 involving improper certificate validation in Active Directory Federation Services (AD FS). This flaw allows an unauthorized attacker to perform network spoofing attacks. The vulnerability affects multiple specific versions of the .NET Framework and related components. Microsoft has issued official fixes for the affected versions to address this issue.
CVE-2026-70194 is a vulnerability in Microsoft .NET 11.0 runtime involving improper certificate validation. This flaw allows an unauthorized attacker to bypass a security feature over a network. The issue affects specific versions of the .NET runtime prior to official fixes. A patch is available and has been officially released by Microsoft.
CVE-2026-70197 is a high-severity out-of-bounds write vulnerability in Microsoft .NET 10.0 installed on Linux. This flaw allows an unauthorized attacker to execute code remotely over a network. Multiple versions of .NET 8.0, 9.0, 10.0, 11.0 preview, and 16.11 are affected. Official fixes have been released for all impacted versions.
CVE-2026-70188 is a critical HTTP request smuggling vulnerability in Microsoft ASP.NET Core 10.0 and other versions. It arises from inconsistent interpretation of HTTP requests, allowing an unauthorized attacker to bypass security features over a network. The vulnerability affects multiple versions of ASP.NET Core and has been officially fixed in specific releases.
CVE-2026-70183 is a race condition vulnerability in Microsoft ASP.NET Core 10.0 that allows an authorized attacker to elevate privileges over a network. The flaw arises from improper synchronization during concurrent execution using a shared resource. This vulnerability affects multiple versions of ASP.NET Core prior to their respective fixed releases. A high-severity CVSS score of 7.5 has been assigned. Official patches are available to remediate this issue.
CVE-2026-70181 is a high-severity vulnerability in Microsoft ASP.NET Core 10.0 involving allocation of resources without limits or throttling. This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network by exhausting system resources. The vulnerability affects multiple ASP.NET Core versions prior to their respective fixed releases. Official patches have been released to address this issue.
CVE-2026-70196 is a vulnerability in Microsoft ASP.NET Core 10.0 involving inefficient algorithmic complexity that allows an unauthorized attacker to cause a denial of service (DoS) over a network. The flaw affects multiple versions of ASP.NET Core prior to fixed releases. The vulnerability has a medium severity rating with a CVSS score of 5.9. Official fixes are available in specified patched versions.
CVE-2026-70175 is a high-severity vulnerability in Microsoft ASP.NET Core 10.0 involving a weak password recovery mechanism that allows improper authentication. This flaw enables an unauthorized attacker to elevate privileges over a network. The issue affects multiple ASP.NET Core versions prior to their respective fixed releases. Official patches have been released to address this vulnerability.
CVE-2026-70159 is a high-severity vulnerability in Microsoft Visual Studio 2022 and related products caused by allocation of resources without limits or throttling in ASP.NET Core. This flaw allows an unauthorized attacker to cause a denial of service (DoS) over the network by exhausting resources. The issue affects multiple versions of Visual Studio 2022 and related products prior to fixed releases. An official fix is available from Microsoft.
CVE-2026-85790 is a use-after-free vulnerability in Microsoft QUIC affecting Microsoft Visual Studio 2022 version 17.14 and other related Microsoft products. This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a medium severity with a CVSS score of 5.9. Official patches have been released to address this issue.
CVE-2026-69651 is a vulnerability in Microsoft .NET 10.0 runtime involving inefficient algorithmic complexity that allows an unauthorized attacker to cause a denial of service over a network. The flaw affects multiple versions of the .NET runtime prior to fixed releases. Microsoft has issued official fixes for the affected versions. The vulnerability has a high severity rating with a CVSS score of 7.5. No known exploits are reported in the wild at this time.
CVE-2026-66822 is a vulnerability in Microsoft .NET 10.0 runtime involving the insertion of sensitive information into sent data, which can allow unauthorized disclosure of information over a network. The flaw affects multiple .NET runtime versions prior to their respective fixed releases. The vulnerability has a medium severity rating with a CVSS score of 5.9. An official fix is available from Microsoft.
A buffer overflow vulnerability exists in the TIFF CCITT Group 4 (T6) encoder of the SixLabors.ImageSharp library versions 2.1.0 through 4.1.1. When encoding a 1-bit image, the encoder writes beyond the allocated output buffer, causing an unhandled exception and process termination. This occurs because the encoder appends two 12-bit end-of-facsimile-block codes without checking buffer capacity. The issue affects applications that decode a Group 4 TIFF and then re-encode it using inherited TIFF metadata. No active exploitation is known. Fixed versions are 3.2.0 and 4.1.2.
SixLabors.ImageSharp versions 2.0.0 through 4.1.1 contain a vulnerability in the BigTIFF decoder where a malformed BigTIFF file with a large IFD entry count can cause the decoder to enter a non-progressing loop. This results in a decoder thread being occupied for an attacker-controlled duration, demonstrated to exceed five seconds in testing. No active exploitation is known, and the issue is fixed in versions 3.2.0 and 4.1.2.
ImageSharp's TIFF CCITT Group 3 (T4) encoder in versions 2.0.0 through 4.1.1 can write beyond its allocated compressed-data buffer when encoding narrow 1-bit images. This unchecked buffer overflow can corrupt process memory and cause application crashes. The issue occurs when encoding 1-bit TIFF images with CcittGroup3Fax compression, either explicitly configured or when re-encoding TIFFs preserving metadata. No active exploitation is known. Fixed in versions 3.2.0 and 4.1.2.
A vulnerability in SixLabors.ImageSharp versions 2.0.0 through 4.1.1 allows a specially crafted 32-bit floating-point TIFF image containing positive infinity samples to cause an application crash via an unchecked out-of-range histogram index in the HistogramEqualization() function. This leads to an AccessViolationException due to unsafe memory access during histogram equalization processing.
A vulnerability in SixLabors.ImageSharp's ICC profile parser allows a malformed embedded ICC profile to trigger a large memory allocation from attacker-controlled channel and grid dimensions before validating the data. This can cause significant memory pressure during ICC profile conversion in versions 1.0.0-beta0001 through 4.1.1. The issue is fixed in versions 3.2.0 and 4.1.2.
A heap-based buffer overflow vulnerability exists in SixLabors.ImageSharp when decoding tiled TIFF images with fax compression (T4/T6/MH). The tile buffer is allocated based on TileWidth, but the decompressor writes scanlines based on the full image width, causing out-of-bounds writes. This can lead to deterministic crashes or heap corruption when processing attacker-crafted TIFF files.