Microsoft

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.