CVE-2025-54508 is a vulnerability in the Secure Encrypted Virtualization (SEV) firmware involving improper validation of Reverse Map Table (RMP) entries. This flaw could allow a privileged attacker to cause concurrent modifications to RMP entries without proper synchronization, potentially leading to loss of data integrity. The vulnerability has a medium severity rating and a CVSS score of 4.0. No affected versions or patch information is provided, and no known exploits are reported in the wild.
CAI Content Credentials suffers from an improper input validation vulnerability that can allow an attacker to bypass security features and gain unauthorized write access without requiring user interaction. Exploitation depends on conditions beyond the attacker's control. The vulnerability has a medium severity rating with a CVSS score of 5.9.
CVE-2025-62620 is a medium severity vulnerability involving improper validation of unsafe equivalence in input. This flaw could allow an attacker with high privileges to reclaim the ring buffer queue status page, which may lead to loss of guest memory integrity. No known exploits are reported in the wild, and no affected versions or patches are specified.
A vulnerability in AMD Secure Encrypted Virtualization (SEV) firmware allows a malicious hypervisor to bypass Reverse Map Table (RMP) protections. This could lead to a loss of memory integrity for SEV-SNP guests. The issue is classified as a medium severity vulnerability with a CVSS score of 5.9. No affected versions or patch information are provided.
A high-severity information disclosure vulnerability exists in Aspire CLI versions 13.2.0 through 13.6.4 on Linux and macOS platforms. The issue arises from insecure temporary files used by the Aspire CLI's deprecated MCP configuration scanner, which can expose sensitive configuration information to local attackers on shared temporary directories. The vulnerability is fixed in version 13.6.5.
A vulnerability in Aspire CLI versions 13.2.0 through 13.6.4 on Linux and macOS allows a local attacker to exploit insecure temporary directory permissions to influence MSBuild response-file discovery and execute code with the privileges of the developer running the CLI. This affects CLI-generated server and integration builds on non-Windows systems. The issue is fixed in version 13.6.5.
A denial of service vulnerability exists in Microsoft.AspNetCore.Server.HttpSys where malformed chunked HTTP requests with conflicting content-length headers can cause resource retention. This affects certain versions of ASP.NET Core on Windows platforms. The issue is rated high severity with a CVSS score of 7.5. Fixed versions have been released for standalone packages and runtime packages across multiple .NET versions. Users should update to the fixed versions to mitigate the risk.
A vulnerability in ASP.NET Core's Kestrel Named Pipes transport on Windows allows a local user to claim a named pipe path by exploiting loss of protected namespace ownership during recovery when configured with CurrentUserOnly. This security feature bypass can lead to confidentiality and integrity impacts. The issue affects multiple runtime packages across .NET versions 8.0 through 11.0, with patches available in specific fixed versions. Users should update to the patched runtime versions to mitigate the risk.
A vulnerability in ASP.NET Core's PathString.StartsWithSegments method mishandles percent-encoded backslashes, allowing authorization checks to match unintended paths. This affects multiple platforms and architectures. The issue is rated medium severity with a CVSS score of 6.5. Fixed versions are available in Microsoft.AspNetCore.App.Runtime 11.0.0 and later.
A vulnerability in Microsoft.AspNetCore.SignalR.StackExchangeRedis allows mishandling of case-mismatched group removal, leading to persistent resource amplification and denial of service. This affects multiple platforms including Windows, Linux, and macOS. The issue is tracked as CVE-2026-114147 with a CVSS v3.1 base score of 7.5 (high severity). Fixed versions have been released for affected package versions across .NET 8.0, 9.0, 10.0, and 11.0.
A vulnerability in ASP.NET Core allows processing of comma-separated HTTP header values to cause excessive memory allocations leading to resource exhaustion. This denial of service issue affects multiple platforms and architectures. The flaw is tracked as CVE-2026-109478 with a CVSS 3.1 base score of 7.5 (high severity). Fixed versions have been released for affected runtime packages in .NET 8.0 and 9.0.
A critical elevation of privilege vulnerability (CVE-2026-114146) exists in Microsoft.AspNetCore.Http.Connections, part of ASP.NET Core. The flaw allows SignalR connections to not consistently bind to the identity negotiated at connection establishment, enabling injected messages to execute Hub invocations as the victim. This affects multiple platforms including Windows, Linux, and macOS across various runtime and standalone package versions. Microsoft has released patches for affected versions to address this issue.
A vulnerability in ASP.NET Core's ResponseBufferingStream can cause response-body data from one request to be exposed in HTTP logging of another request due to reused pooled tail memory. This affects multiple platforms and architectures. The issue is addressed in version 11.0.0 of the affected runtime packages.
Multiple security vulnerabilities have been identified in libreswan, an implementation of IPsec and IKE for Linux used to build secure VPN tunnels. These include use-after-free, denial of service via malformed X.509 certificates, and null pointer dereferences in various IKEv2 components. Red Hat has issued an important security advisory providing fixes and enhancements by rebasing libreswan to version 5.3.3. The update addresses four specific CVEs related to memory corruption and denial of service issues.
A high-severity vulnerability (CVE-2026-118748) affects ASP.NET Core versions 11.0.0-preview.7.26381.103 through 11.0.0-rc.3.26522.148 across multiple platforms and architectures. The flaw involves Blazor static-SSR client validation retaining attacker-controlled rendered field names in an unbounded singleton cache, which can lead to remote process memory exhaustion, causing denial of service. A fixed version 11.0.0 is available and should be applied to mitigate the issue.
A vulnerability in the .NET SDK's dotnet-watch component allows a local attacker to elevate privileges by replacing or modifying temporary solution files used during builds. The issue affects Linux and macOS platforms with certain versions of the .NET SDK and the Microsoft.DotNet.HotReload.Watch.Aspire package. Microsoft has released fixed versions that store generated solution files in a private temporary directory and keep files open with read-only sharing during builds to prevent tampering.
A vulnerability in Ruby on Rails Active Storage prior to versions 8.0.5.2 and between 8.1 and 8.1.4.1 allows exposure of local media files. This occurs because certain Active Storage components pass uploaded blob contents to FFmpeg without restricting the demuxer, enabling an attacker to craft uploads that cause FFmpeg to open local file segments. This can disclose local files readable by the application process if the attacker knows the file path.
A high-severity elevation of privilege vulnerability exists in ASP.NET Core affecting the Blazor/SignalR `/_blazor/refresh` path. This flaw allows a cross-site request to bind a victim's authenticated principal to an attacker-owned circuit, potentially leading to unauthorized access. The issue affects multiple platforms including Windows, Linux, and macOS across all architectures. Versions from 11.0.0-preview.6.26359.118 up to and including 11.0.0-rc.3.26522.148 are vulnerable. A fixed version 11.0.0 has been released to address this vulnerability.
A denial of service vulnerability exists in Microsoft.AspNetCore.WebUtilities versions 2.3.0 through 2.3.13. The issue arises from the FileBufferingReadStream buffer allocation, which can allow unauthenticated multipart-form requests to exhaust memory. This vulnerability has a CVSS 3.1 base score of 7.5 (high severity). A fixed version 2.3.14 is available to address this issue.