Fixes 4 records
Priority MEDIUM 43
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0243 · Published 2026-05-12 · Fixed in 10.0.8, 8.0.27 +1 CWE-835
Priority LOW 35
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.3· Local · No auth · User interaction · EPSS 0.00766 · Published 2026-05-12 · Fixed in 10.0.8, 8.0.27 +2 CWE-190
Priority LOW 35
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.3· Local · No auth · User interaction · EPSS 0.00639 · Published 2026-05-12 · Fixed in 10.0.8, 8.0.27 +5 CWE-122
Priority LOW 21
A tampering vulnerability exists when .NET Core improperly handles specially crafted files.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00711 · Published 2026-05-12 · Fixed in 10.0.8, 8.0.27 +4 CWE-36
