.NET Core Elevation of Privilege Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
Advisories for Nuget/Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-X64 package
2022
.NET Core Information Disclosure Vulnerability
.NET Core and Visual Studio Information Disclosure Vulnerability
.NET Remote Code Execution Vulnerability
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0, and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A Remote Code Execution vulnerability exists in .NET 6.0, .NET 5.0, and .NET Core 3.1 where a stack buffer overrun occurs in .NET Double Parse routine.
Integer overflow in the bundled Brotli C library
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the …
Denial of service in .NET core
.NET Core and Visual Studio Denial of Service Vulnerability