CVE-2026-35433

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

A vulnerability in .NET, .NET Framework, and Visual Studio allows elevation of privilege. Technical details are not provided in the description, but the flaw may allow an attacker to gain higher privileges on the system.

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.