Most recent entries from all

bdu:2026-15094

BELL-CVE-2026-70354

Affected: Alpaquita:25: dotnet8-runtime, Alpaquita:stream: dotnet8-runtime

BIT-dotnet-2026-70354 — .NET Core Remote Code Execution Vulnerability

Affected: Bitnami: dotnet

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

certfr-2026-avi-1001 — De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaqua…

certfr-2026-avi-1001

EUVD-2026-378732

fkie_cve-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

GHSA-gg8c-3338-xw2f — Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability

Affected: NuGet: Microsoft.WindowsDesktop.App.Runtime.win-arm64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x64, NuGet: Microsoft.WindowsDesktop.App.Runtime.win-x86

## Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

An out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/432

## CVSS Details

- **Version:** 3.1 - **Severity:** High - **Score:** 7.8 - **Vector:** `CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C` - **Weakness:** CWE-787: Out-of-bounds Write

## Affected Platforms

- **Platforms:** Windows - **Architectures:** All

## <a name="affected-packages"></a>Affected Packages The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below

### <a name=".NET 10"></a>.NET 10 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.WindowsDesktop.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-arm64) | >= 10.0.0, <= 10.0.10 | 10.0.11 [Microsoft.WindowsDesktop.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x64) | >= 10.0.0, <= 10.0.10 | 10.0.11 [Microsoft.WindowsDesktop.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.WindowsDesktop.App.Runtime.win-x86) | >=…

jvndb-2026-035789

CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability CVE-2026-59138 |…

msrc_CVE-2026-70354 — .NET Core Remote Code Execution Vulnerability

msrc_CVE-2026-70354

NCSC-2026-0285 — Kwetsbaarheden verholpen in Microsoft Developer Tools

NCSC-2026-0285

UBUNTU-CVE-2026-70354

Affected: Ubuntu:22.04:LTS: dotnet7

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

WID-SEC-W-2026-2761 — Microsoft Developer Tools: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio Code, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft .NET Framework, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft PowerShell, Microsoft Windows, Microsoft .NET, Microsoft Visual Studio 2022 und Microsoft Visual Studio 2026 ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.