https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:21:08.715240+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-11613 bdu:2026-11613 2026-10-02T14:21:08.745893+00:00 bdu:2026-11613 https://cve.radiocsirt.org/vuln/bell-cve-2026-62897 BELL-CVE-2026-62897 2026-10-02T14:21:08.745941+00:00

Affected: Alpaquita:25: dotnet8-runtime, Alpaquita:stream: dotnet8-runtime

 https://cve.radiocsirt.org/vuln/bit-dotnet-2026-62897 BIT-dotnet-2026-62897 — .NET Framework Remote Code Execution Vulnerability 2026-10-02T14:21:08.745974+00:00

Affected: Bitnami: dotnet

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1002 certfr-2026-avi-1002 — De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant… 2026-10-02T14:21:08.745997+00:00 certfr-2026-avi-1002 https://cve.radiocsirt.org/vuln/euvd-2026-378449 EUVD-2026-378449 2026-10-02T14:21:08.746012+00:00 EUVD-2026-378449 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62897 fkie_cve-2026-62897 2026-10-02T14:21:08.746023+00:00

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

 https://cve.radiocsirt.org/vuln/ghsa-fx4q-gjrx-2jw6 GHSA-fx4q-gjrx-2jw6 — Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability 2026-10-02T14:21:08.746042+00:00

Affected: NuGet: Microsoft.WindowsDesktop.App.Runtime.win-arm64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x86

## Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

An integer overflow or wraparound in .NET allows an unauthorized attacker to execute code locally.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/434

## CVSS Details

- **Version:** 3.1 - **Severity:** High - **Score:** 7.0 - **Vector:** `CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C` - **Weakness:** CWE-190: Integer Overflow or Wraparound

## Affected Platforms

- **Platforms:** Windows - **Architectures:** All

## <a name="affected-packages"></a>Affected Packages The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below

### <a name=".NET 10"></a>.NET 10 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.WindowsDesktop.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64) | >= 10.0.0, <= 10.0.10 | 10.0.11 [Microsoft.WindowsDesktop.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64) | >= 10.0.0, <= 10.0.10 | 10.0.11 [Microsoft.WindowsDesktop.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App…

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-62897 msrc_CVE-2026-62897 — .NET Framework Remote Code Execution Vulnerability 2026-10-02T14:21:08.746108+00:00 msrc_CVE-2026-62897 https://cve.radiocsirt.org/vuln/ncsc-2026-0285 NCSC-2026-0285 — Kwetsbaarheden verholpen in Microsoft Developer Tools 2026-10-02T14:21:08.746124+00:00 NCSC-2026-0285 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-62897 UBUNTU-CVE-2026-62897 2026-10-02T14:21:08.746156+00:00

Affected: Ubuntu:22.04:LTS: dotnet7

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2761 WID-SEC-W-2026-2761 — Microsoft Developer Tools: Mehrere Schwachstellen 2026-10-02T14:21:08.746174+00:00

Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio Code, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft .NET Framework, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft PowerShell, Microsoft Windows, Microsoft .NET, Microsoft Visual Studio 2022 und Microsoft Visual Studio 2026 ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.