High
CVE-2026-106110
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 214
Reset filters
High
CVE-2026-106113
ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index
Medium
CVE-2026-106114
ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions
High
CVE-2026-106117
ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp
Low
CVE-2026-105795
Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
Critical
CVE-2026-105794
MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL
High
CVE-2026-100368
CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers
High
CVE-2026-100369
CliInvoke: Argument Injection in Extensibility Runner Factory
Medium
CVE-2026-81868
Steeltoe: Header-forwarded client cert lacks proof of private-key possession
High
CVE-2026-81516
Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)
Medium
CVE-2026-69304
Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
High
CVE-2026-69522
Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability
High
CVE-2026-69439
Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability
High
CVE-2026-71328
Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability
High
CVE-2026-50646
Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability
Critical
CVE-2026-62815
Microsoft QUIC: Remote Code Execution Vulnerability
Medium
CVE-2026-62900
Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability
High
ghsa-pfvm-w89x-94jw
SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)
High
ghsa-jwjp-4649-v8jp
SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing
Medium
CVE-2026-62902
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
High
CVE-2026-62871
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-62897
Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
High
CVE-2026-70354
Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability
Medium
CVE-2026-62909
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.