Microsoft Microsoft.Netcore.App.Runtime.Linux-Arm vulnerabilities

CVE-2025-30399 [HIGH] CWE-426 Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability # Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers can do to update their applications to remo

CVE-2026-50659 [MEDIUM] CWE-116 Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SMTP client (System.Net.Mail). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A spoofing vulnerability exists in the SMTP cl

CVE-2023-24936 [HIGH] .NET Elevation of Privilege Vulnerability .NET Elevation of Privilege Vulnerability # Microsoft Security Advisory CVE-2023-24936: .NET Elevation of Privilege Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A vulnerability exists in .NET when deseri

CVE-2026-70194 [MEDIUM] CWE-295 Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Security. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerabili

CVE-2026-62899 [MEDIUM] CWE-444 Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.HttpListener. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Inconsistent interpretation

CVE-2024-38095 [HIGH] CWE-20 Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability # Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0 and .NET 8.0. This advisory also provides guidance on what developers can do to update their app

CVE-2020-8927 [MEDIUM] CWE-120 Integer overflow in the bundled Brotli C library Integer overflow in the bundled Brotli C library A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "s

CVE-2023-33128 [HIGH] CWE-416 .NET Remote Code Execution Vulnerability .NET Remote Code Execution Vulnerability # Microsoft Security Advisory CVE-2023-33128: .NET Remote Code Execution Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A vulnerability exists in .NET source generator fo

CVE-2024-21392 [HIGH] CWE-400 Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability # Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 8.0 . This advisory also provides guidance on what developers can do to update their appl

CVE-2024-30045 [MEDIUM] CWE-122 Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability # Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory also provides guidance on what developers can do to update their appli

CVE-2021-26423 [HIGH] .NET Core Elevation of Privilege Vulnerability .NET Core Elevation of Privilege Vulnerability Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service vulnerability exists in .NET 5.0, .NET Core 3.1 and .NET Core 2.1 where .NET (Core) server applications providing WebS

CVE-2023-29331 [HIGH] CWE-400 .NET Denial of Service vulnerability .NET Denial of Service vulnerability # Microsoft Security Advisory CVE-2023-29331: .NET Denial of Service vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A vulnerability exists in .NET when processing X.

CVE-2026-66822 [MEDIUM] CWE-201 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. S

CVE-2022-24512 [MEDIUM] .NET Remote Code Execution Vulnerability .NET Remote Code Execution Vulnerability Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0, and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A Remote Code Execution vulnerability exists in .NET 6.0, .NET 5.0, and .NET Core 3.1 where a stack buffer overrun occurs in .NET Double P

CVE-2024-38167 [MEDIUM] CWE-319 Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability # Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0. This advisory also provides guidance on what developers can do to update thei

CVE-2025-55248 [MEDIUM] CWE-326 Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability # Microsoft Security Advisory CVE-2025-55248 | .NET Information Disclosure Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers can do to

CVE-2023-36799 [MEDIUM] CWE-400 Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability # Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 6.0. This advisory also provides guidance on what developers can do to update their app

CVE-2021-1721 [MEDIUM] Denial of service in .NET core Denial of service in .NET core .NET Core and Visual Studio Denial of Service Vulnerability due to a vulnerability which exists when creating HTTPS web request during X509 certificate chain building.

CVE-2021-34485 [MEDIUM] .NET Core Information Disclosure Vulnerability .NET Core Information Disclosure Vulnerability Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1 and .NET Core 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An information disclosure vulnerability exists in .NET 5.0, .NET Core 3.1 and .NET Core 2.1 when dumps created by the too

CVE-2023-21538 [HIGH] CWE-502 .NET Denial of Service Vulnerability .NET Denial of Service Vulnerability # Microsoft Security Advisory CVE-2023-21538: .NET Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service vulnerability exists in .NET 6.0 where a m