Microsoft Net 10.0 Runtime vulnerabilities

CVE-2026-105016 [CRITICAL] CWE-122 CVE-2026-105016: Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

CVE-2026-83520 [HIGH] CWE-502 CVE-2026-83520: Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a net Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70035 [HIGH] CWE-502 CVE-2026-70035: Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-87697 [HIGH] CWE-502 CVE-2026-87697: Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a net Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70174 [HIGH] CWE-358 CVE-2026-70174: Improperly implemented security check for standard in .NET allows an unauthorized attacker to execut Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96235 [HIGH] CWE-787 CVE-2026-96235: Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70007 [HIGH] CWE-787 CVE-2026-70007: Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-96224 [HIGH] CWE-787 CVE-2026-96224: Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70197 [HIGH] CWE-787 CVE-2026-70197: Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-85363 [HIGH] CWE-190 CVE-2026-85363: Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileg Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-96957 [HIGH] CWE-347 CVE-2026-96957: Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-96237 [HIGH] CWE-829 CVE-2026-96237: Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96233 [HIGH] CWE-787 CVE-2026-96233: Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-69651 [HIGH] CWE-407 CVE-2026-69651: Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a ne Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-96231 [HIGH] CWE-59 CVE-2026-96231: Improper link resolution before file access ('link following') in .NET allows an authorized attacker Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-96225 [HIGH] CWE-59 CVE-2026-96225: Improper link resolution before file access ('link following') in .NET allows an authorized attacker Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-58280 [HIGH] CWE-674 CVE-2026-58280: Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-96232 [HIGH] CWE-125 CVE-2026-96232: Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-70190 [HIGH] CWE-59 CVE-2026-70190: Improper link resolution before file access ('link following') in .NET allows an authorized attacker Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-70161 [HIGH] CWE-22 CVE-2026-70161: Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an aut Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.