Read the docs
Microsoft update

KB5101006

Security Update

View on Microsoft →

Fixed in

Fixes 17 records

Priority MEDIUM 43

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04017 Published 2026-07-14 Fixed in 8.0.29, 9.0.18 +8 CWE-502
Priority MEDIUM 43

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04017 Published 2026-07-14 Fixed in 8.0.29, 9.0.18 +10 CWE-502
TI-2026-34881 CVE-2026-47304 · GHSA-g8r8-53c2-pm3f

.NET Security Feature Bypass Vulnerability

Priority MEDIUM 43

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00286 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +12 CWE-345
Priority MEDIUM 42

Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0173 Published 2026-07-14 Fixed in 5.7.1, 2.0.50727.9182 & 3.0.30729.9168 +6 CWE-502
Priority MEDIUM 41

Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 8.19.2, 2.0.50727.9182 & 3.0.30729.9168 +6 CWE-400
Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-770
Priority MEDIUM 41

Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 +15 CWE-835
Priority MEDIUM 41

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-121
TI-2026-37259 CVE-2026-50525 · GHSA-8q5v-6pqq-x66h

.NET Denial of Service Vulnerability

Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +12 CWE-770
Priority MEDIUM 41

Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 +15 CWE-121
Priority MEDIUM 41

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 +10 CWE-121
Priority MEDIUM 41

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 +10 CWE-121
Priority MEDIUM 41

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 +10 CWE-121
TI-2026-34879 CVE-2026-47302 · GHSA-cvvh-rhrc-wg4q

.NET Denial of Service Vulnerability

Priority MEDIUM 41

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-770
Priority LOW 36

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00462 Published 2026-07-14 Fixed in 8.0.29, 9.0.18 +10 CWE-94
TI-2026-37347 CVE-2026-50659 · GHSA-74jp-vm22-8q8x

.NET Spoofing Vulnerability

Priority LOW 30

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00738 Published 2026-07-14 Fixed in 10.0.10, 8.0.29 +11 CWE-116
Priority LOW 28

Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00855 Published 2026-07-14 Fixed in 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 +9 CWE-835