https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:38:48.897412+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15094 bdu:2026-15094 2026-10-04T11:38:49.020076+00:00 bdu:2026-15094 https://cve.radiocsirt.org/vuln/bell-cve-2026-70354 BELL-CVE-2026-70354 2026-10-04T11:38:49.020112+00:00

Affected: Alpaquita:25: dotnet8-runtime, Alpaquita:stream: dotnet8-runtime

 https://cve.radiocsirt.org/vuln/bit-dotnet-2026-70354 BIT-dotnet-2026-70354 — .NET Core Remote Code Execution Vulnerability 2026-10-04T11:38:49.020142+00:00

Affected: Bitnami: dotnet

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1001 certfr-2026-avi-1001 — De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaqua… 2026-10-04T11:38:49.020165+00:00 certfr-2026-avi-1001 https://cve.radiocsirt.org/vuln/euvd-2026-378732 EUVD-2026-378732 2026-10-04T11:38:49.020183+00:00 EUVD-2026-378732 https://cve.radiocsirt.org/vuln/fkie_cve-2026-70354 fkie_cve-2026-70354 2026-10-04T11:38:49.020194+00:00

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

 https://cve.radiocsirt.org/vuln/ghsa-gg8c-3338-xw2f GHSA-gg8c-3338-xw2f — Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability 2026-10-04T11:38:49.020213+00:00

Affected: NuGet: Microsoft.WindowsDesktop.App.Runtime.win-arm64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x86

## Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

An out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/432

## CVSS Details

- **Version:** 3.1 - **Severity:** High - **Score:** 7.8 - **Vector:** `CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C` - **Weakness:** CWE-787: Out-of-bounds Write

## Affected Platforms

- **Platforms:** Windows - **Architectures:** All

## <a name="affected-packages"></a>Affected Packages The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below

### <a name=".NET 10"></a>.NET 10 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.WindowsDesktop.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64) | >= 10.0.0, <= 10.0.10 | 10.0.11 [Microsoft.WindowsDesktop.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64) | >= 10.0.0, <= 10.0.10 | 10.0.11 [Microsoft.WindowsDesktop.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x86) | >=…

 https://cve.radiocsirt.org/vuln/jvndb-2026-035789 jvndb-2026-035789 2026-10-04T11:38:49.020281+00:00

CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability CVE-2026-59138 |…

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-70354 msrc_CVE-2026-70354 — .NET Core Remote Code Execution Vulnerability 2026-10-04T11:38:49.020353+00:00 msrc_CVE-2026-70354 https://cve.radiocsirt.org/vuln/ncsc-2026-0285 NCSC-2026-0285 — Kwetsbaarheden verholpen in Microsoft Developer Tools 2026-10-04T11:38:49.020372+00:00 NCSC-2026-0285 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-70354 UBUNTU-CVE-2026-70354 2026-10-04T11:38:49.020416+00:00

Affected: Ubuntu:22.04:LTS: dotnet7

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2761 WID-SEC-W-2026-2761 — Microsoft Developer Tools: Mehrere Schwachstellen 2026-10-04T11:38:49.020433+00:00

Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio Code, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft .NET Framework, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft PowerShell, Microsoft Windows, Microsoft .NET, Microsoft Visual Studio 2022 und Microsoft Visual Studio 2026 ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.