| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application.
The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests. |
| A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application.
The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests. |
| Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| Visual Studio Elevation of Privilege Vulnerability |
| .NET and Visual Studio Remote Code Execution Vulnerability |
| Visual Studio Tools for Office Runtime Spoofing Vulnerability |
| Visual Studio Elevation of Privilege Vulnerability |
| Visual Studio Remote Code Execution Vulnerability |
| .NET Core and Visual Studio Information Disclosure Vulnerability |
| .NET Core and Visual Studio Denial of Service Vulnerability |
| Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| Visual Studio Collector Service Denial of Service Vulnerability |
| Visual C++ Redistributable Installer Elevation of Privilege Vulnerability |
| .NET Core Remote Code Execution Vulnerability |
| .NET Core and Visual Studio Denial of Service Vulnerability |
| A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.
To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system.
The security update fixes the vulnerability by ensuring .NET Core properly handles files. |
| Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. |
| .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
| Visual Studio Remote Code Execution Vulnerability |
| .NET and Visual Studio Remote Code Execution Vulnerability |
