Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 25
Reset filtersMicrosoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability
A spoofing vulnerability in System.Security.Cryptography.Xml allows serialized certificates with attacker-controlled chain metadata to be accepted, enabling certificate forgery and token spoofing. Mitigation requires updating .NET runtimes, SDKs, and affected package references.
Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability
A denial of service vulnerability exists in .NET and Visual Studio packages System.Security.Cryptography.Xml and System.Private.Xml due to unbounded resource allocation. Remediate by updating packages and runtimes.
Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability
A denial of service vulnerability in Microsoft .NET's System.Security.Cryptography.Xml and System.Private.Xml allows asymmetric resource consumption. Developers should update affected packages or runtimes to the patched versions and recompile self-contained apps.
Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability
Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability
MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade
Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability
Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability
Mimekit has vulnerable dependency that can lead to denial of service
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
.NET Information Disclosure Vulnerability
.NET Denial of Service vulnerability
Improper Certificate Validation
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.