CriticalCVSS 9.8
EPSS 1.7%
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Product
Microsoft .NET 11.0 runtime vulnerabilities
30 published CVES affecting Microsoft .NET 11.0 runtime, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 30
- Critical
- 1
- High
- 22
- Medium
- 7
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest Microsoft .NET 11.0 runtime CVEs
Newest publication first · page 1 of 2
-
-
HighCVSS 7.5 EPSS 1.3%
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 8.8 EPSS 0.53%
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
MediumCVSS 6.5 EPSS 0.30%
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
HighCVSS 8.8 EPSS 0.86%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 5.3 EPSS 0.33%
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 7.5 EPSS 0.99%
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 0.90%
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 7.8 EPSS 0.41%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
MediumCVSS 6.5 EPSS 0.95%
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 7.8 EPSS 0.41%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
HighCVSS 8.8 EPSS 0.86%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
-
HighCVSS 8.8 EPSS 1.4%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 1.4%
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.80%
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.76%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 6.7 EPSS 0.38%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
HighCVSS 8.1 EPSS 0.79%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 6.5 EPSS 0.49%
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
-
HighCVSS 7.3 EPSS 0.49%
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.3 EPSS 0.49%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
HighCVSS 8.8 EPSS 0.91%
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.84%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
-
HighCVSS 7.5 EPSS 1.3%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
MediumCVSS 5.9 EPSS 0.78%
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.