Microsoft ≫ .Net Framework

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.