CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-96233

7.5

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Out-of-bounds
Details

CVE-2026-96232

7.5

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

Out-of-bounds
Details

CVE-2026-96231

7.8

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Details

CVE-2026-96230

8.8

Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

Details

CVE-2026-96229

6.5

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

Permissive
Details

CVE-2026-96225

7.8

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Details

CVE-2026-96224

8.8

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Out-of-bounds
Details

CVE-2026-96223

7.8

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-96222

7.4

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Apple
Details

CVE-2026-96220

7.8

Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.

Microsoft
Details
← 1039/12323 →