A buffer overflow vulnerability (CWE-787) exists in the Brotli decompression library used by .NET, potentially allowing unauthenticated attackers to read or corrupt process memory. This can lead to information disclosure, denial of service, or elevation of privilege. The vulnerability affects .NET applications that enable Brotli decompression or explicitly use Brotli decompression APIs with attacker-controlled data. ASP.NET Core and HttpClient do not enable Brotli decompression by default, so exposure requires explicit configuration. The .NET Framework is not affected. Fixed versions have been released for affected packages.
Metalama's Visual Studio integration uses a local named pipe for inter-process communication that deserializes messages without restricting CLR types, enabling local code execution. This unsafe deserialization affects all Metalama releases from 2023.0 through 2026.1.18 and is fixed in 2026.1.19. The pipe is accessible only by processes running as the same user, limiting exploitation to local same-user attackers. The vulnerability allows arbitrary code execution within the Visual Studio processes hosting Metalama components, impacting confidentiality, integrity, and availability of those processes. The practical severity is medium due to the same-user restriction and lack of privilege escalation. Remediation requires upgrading to Metalama 2026.1.19 or later, or updating affected Visual Studio extensions accordingly.
MySqlConnector versions prior to 2.6.1 have a vulnerability in zero-configuration TLS mode when using SslMode set to VerifyCA or VerifyFull without a configured CA certificate. In this scenario, an attacker capable of man-in-the-middle interception can present a self-signed certificate and cause the client to send its database password in clear text before the certificate is validated. This undermines the expected server authentication and exposes the password to interception. The issue does not affect connections that use a configured CA certificate, local Unix socket connections, or empty passwords. A fix is available in version 2.6.1.
A stored Cross-Site Scripting (XSS) vulnerability exists in the media plugin of TinyMCE. This flaw allows attackers to inject malicious scripts via elements crafted through the data-mce-object attribute, which are executed before proper sanitization. The vulnerability affects TinyMCE versions 7.9.3 and 8.5.1 up to but not including 7.9.4 and 8.9.3 respectively. It has been patched in TinyMCE 7.9.4 and 8.9.3. No official workaround is available other than upgrading.
Metalama.Framework versions before 2026.1.19 load and execute compile-time assemblies and helper tools from predictable temporary directories on Linux and macOS. These directories are world-writable system temp locations, allowing a local unprivileged user to plant malicious DLLs that get executed by higher-privileged build or IDE processes. This results in local privilege escalation and arbitrary code execution. Windows default configurations are not affected due to per-user temp directory protections. The issue is fixed in version 2026.1.19 by relocating caches to per-user application data directories.
A high-severity vulnerability (CVE-2026-70197) exists in Microsoft .NET's System.Net.Sockets on Windows platforms. The flaw involves reusing a SocketAsyncEventArgs instance across IPv4 and IPv6 datagram sockets, which can cause an undersized cached native address buffer to be retained. This leads to an unauthenticated out-of-bounds write during the ReceiveFromAsync operation. Multiple Microsoft.NETCore.App.Runtime.win packages across various Windows architectures are affected. Patched versions are available to address this issue.
A denial of service vulnerability exists in Microsoft.AspNetCore.SignalR.Protocols.MessagePack where the MessagePack protocol can consume excessive memory when deserializing deeply nested attacker-controlled arrays. This vulnerability affects multiple versions of the package across Windows, Linux, and macOS platforms. The issue is identified as CWE-1325 and has a CVSS 3.1 score of 5.3 (medium severity). Patched versions have been released to address this vulnerability.
CVE-2026-105016 is a critical heap-based buffer overflow vulnerability in the Microsoft .NET 10.0 runtime's QUIC implementation. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple versions of the .NET runtime prior to fixed releases. Microsoft has issued official patches to address this issue.
CVE-2026-70162 is a denial of service vulnerability in Microsoft Visual Studio 2022 and related .NET applications caused by improper handling of web requests in the Microsoft Common Object Runtime Library. A remote unauthenticated attacker can exploit this by sending specially crafted requests to cause a denial of service. The issue is fixed in versions 17.14.42, 18.10.4, and 10.0.13.
CVE-2026-102870 is a high-severity code injection vulnerability in Microsoft .NET 10.0 installed on Linux, specifically affecting ASP.NET Core. It allows an unauthorized attacker to execute arbitrary code remotely due to improper control over code generation. Multiple versions of .NET 10.0 and related releases are affected, with official fixes available.
CVE-2026-58280 is a vulnerability in Microsoft .NET runtime versions including 3.0.0.0, 3.5.0, 4.7.x, 4.8.x, 8.0.x, 9.0.x, 10.0.x, 11.0.0-rc.1, 17.14.x, and 18.10.x. It involves uncontrolled recursion that can be exploited by an unauthorized attacker to cause a denial of service over a network. The vulnerability has a high severity score of 7.5 and has been officially fixed in multiple versions. No known exploits are reported in the wild.
CVE-2026-96960 is a high-severity vulnerability in Microsoft .NET Framework 3.5 and related versions that allows an unauthorized attacker to cause asymmetric resource consumption (amplification), leading to denial of service over a network. The flaw affects multiple versions of the .NET Framework and has been officially fixed in specific updates. No known exploits are reported in the wild.
CVE-2026-96959 is a high-severity vulnerability in Microsoft .NET Framework 3.5 and related versions involving allocation of resources without limits or throttling. This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network by exhausting system resources. Microsoft has released official fixes for affected versions to address this issue.
CVE-2026-96958 is a vulnerability in Microsoft .NET Framework 3.5 involving inefficient algorithmic complexity that allows an unauthorized attacker to cause a denial of service over a network. The flaw affects multiple versions of the .NET Framework including 3.0.0.0, 3.5.0, and several 4.x and 10.x versions. Microsoft has released official fixes for this issue in versions 4.7.4150.0, 4.8.4811.0, 4.8.9363.0, and 10.0.13. The vulnerability has a CVSS score of 7.5, indicating high severity, and does not impact confidentiality or integrity but causes availability disruption. No known exploits are reported in the wild at this time.
CVE-2026-96235 is a high-severity out-of-bounds write vulnerability in the Microsoft .NET 10.0 runtime that allows an unauthorized attacker to execute code remotely over a network. The flaw affects multiple .NET runtime versions prior to their respective fixed releases. Microsoft has issued official fixes for all affected versions.
CVE-2026-96229 is a vulnerability in Microsoft .NET 10.0 runtime involving a permissive list of allowed inputs that could allow an unauthorized attacker to disclose information over a network. The flaw affects multiple .NET versions prior to their respective fixed releases. The vulnerability has a medium severity with a CVSS score of 6.5. An official fix is available and should be applied to mitigate the issue.
CVE-2026-96233 is an out-of-bounds write vulnerability in the Microsoft .NET runtime, specifically affecting ASP.NET Core. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability affects multiple versions of the .NET runtime prior to their respective fixed releases. A high-severity CVSS 3.1 score of 7.5 has been assigned. Official patches are available from Microsoft to remediate this issue.
CVE-2026-96231 is a high-severity vulnerability in Microsoft .NET 10.0 runtime involving improper link resolution before file access, known as 'link following'. This flaw allows an authorized local attacker to elevate privileges. The issue affects multiple .NET runtime versions prior to their respective fixed releases. Official patches are available and have been released for all affected versions.
CVE-2026-84008 is a high-severity vulnerability in Microsoft .NET Framework 3.5 and related versions caused by inefficient algorithmic complexity. This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network by exploiting the inefficient processing. The issue affects multiple versions of the .NET Framework and has been officially fixed in specified later versions.