Skip to content
Threat Feed
Subscribe

Product

Microsoft.NETCore.App.Runtime.win-Arm (8.0.0-8.0.31, 9.0.0-9.0.20, 10.0.0-10.0.12, 11.0.0-Preview.1-11.0.0-Rc.1)

2 briefs RSS
low advisory

Denial of Service Vulnerability in .NET XML Components

A denial-of-service vulnerability (CVE-2026-58280) in Microsoft .NET's System.Security.Cryptography.Xml and System.Private.Xml components allows attackers to crash applications via uncontrolled recursion and resource exhaustion.

Microsoft.NETCore.App.Runtime.linux-arm +11 vulnerability denial-of-service dotnet cve-2026-58280
1c
high advisory

Remote Code Execution in .NET System.Net.Sockets

A high-severity remote code execution vulnerability (CVE-2026-70197) in .NET allows unauthenticated out-of-bounds writes on Windows when reusing SocketAsyncEventArgs across IPv4 and IPv6 datagram sockets.

Microsoft.NETCore.App.Runtime.win-arm +4 vulnerability remote-code-execution dotnet windows
1c