.NET vulnerabilities

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

A vulnerability in .NET, .NET Framework, and Visual Studio allows elevation of privilege. Technical details are not provided in the description, but the flaw may allow an attacker to gain higher privileges on the system.

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

A vulnerability in .NET allows an unauthorized attacker to read data outside the allowed memory area over a network.

A vulnerability in .NET related to improper link resolution before file access allows an authorized attacker to elevate privileges locally.

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

A vulnerability in .NET related to improper link resolution before file access allows an authorized attacker to elevate privileges locally.

A vulnerability in .NET involving an out-of-bounds write allows an unauthorized attacker to execute code over a network.

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to cause denial of service over a network.

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

An out-of-bounds write vulnerability in .NET allows an unauthorized attacker to execute code over a network.

An improper link resolution before file access ('link following') vulnerability in .NET allows an authorized attacker to elevate privileges locally.

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

A vulnerability in .NET involves improper limitation of a pathname to a restricted directory (path traversal). An authorized attacker can elevate privileges locally.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

An inclusion of functionality from untrusted control sphere vulnerability in .NET allows an unauthorized attacker to disclose information over a network.

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

An improper removal of sensitive information before storage or transfer vulnerability in .NET allows an unauthorized attacker to disclose information over a network.

An inconsistent interpretation of HTTP requests (HTTP request/response smuggling) vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network.

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

An integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

A resource allocation without limits or throttling vulnerability in .NET allows an unauthorized attacker to cause a denial of service over a network.

An incorrect authorization vulnerability has been discovered in .NET that allows an unauthorized attacker to bypass a security feature over a network.

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

The .NET platform does not limit resource allocation, allowing an unauthorized attacker to perform a denial-of-service attack over a network.

A vulnerability in .NET due to improper verification of cryptographic signature allows an unauthorized attacker to bypass a security feature over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to remotely cause a denial of service (DoS).

An improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

A heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

A vulnerability in .NET, .NET Framework, and Visual Studio causes an infinite loop, allowing an unauthorized attacker to perform a Denial of Service (DoS) attack over a network.