HighCVSS 7.8
EPSS 0.36%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
Product
redhat/dotnet/sdk vulnerabilities
10 published CVES affecting redhat/dotnet/sdk, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 10
- Critical
- 0
- High
- 8
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest redhat/dotnet/sdk CVEs
Newest publication first
-
-
HighCVSS 7.8 EPSS 0.40%
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.47%
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
-
HighCVSS 8.8 EPSS 0.78%
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
-
HighCVSS 7.8 EPSS 0.47%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
-
HighCVSS 7.8 EPSS 0.47%
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.34%
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
-
MediumCVSS 6.5 EPSS 0.87%
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
-
MediumCVSS 5.9 EPSS 0.75%
Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
HighCVSS 7.0 EPSS 0.37%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.