Microsoft ≫ .Net

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.