Vulnerabilities

Summary — last 7 days

New vulnerabilities4,815▲ 1,802 vs. last week
Critical / high2,656▲ 1,132 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)208▲ 38 vs. last week
–

208 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
Awaiting AnalysisHigh (7.5)——Microsoft NET FrameworkAI10/13/202610/13/2026
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.
Awaiting AnalysisHigh (8.8)——Microsoft NET FrameworkAI10/13/202610/14/2026
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
Awaiting AnalysisMedium (6.5)——Microsoft NET FrameworkAI10/13/202610/13/2026
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
Awaiting AnalysisHigh (8.8)——Microsoft NET FrameworkAI10/13/202610/14/2026
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
Awaiting AnalysisHigh (8.8)——Microsoft NET FrameworkAI10/13/202610/14/2026
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
Awaiting AnalysisHigh (8.8)——Microsoft NET FrameworkAI10/13/202610/13/2026
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.
AnalyzedHigh (7.8)0.36%—Microsoft Visual Studio 2022Microsoft Visual Studio 2026Microsoft .net FrameworkMicrosoft .net8/11/20268/17/2026
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
AnalyzedHigh (7.8)0.40%—Microsoft .net Framework8/11/20268/14/2026
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.
AnalyzedHigh (7)0.37%—Microsoft .net FrameworkMicrosoft Visual Studio 2022Microsoft Visual Studio 2026Microsoft .net8/11/20268/14/2026
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
AnalyzedHigh (8.8)0.78%—Microsoft .net Framework8/11/20268/14/2026
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
AnalyzedMedium (6.5)0.74%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 20267/14/20267/24/2026
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
AnalyzedHigh (7.8)0.46%—Microsoft .net FrameworkMicrosoft .net7/14/20267/24/2026
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
AnalyzedHigh (7.8)4.0%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 20267/14/20267/24/2026
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
AnalyzedHigh (7.5)1.2%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 20267/14/20267/24/2026
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
AnalyzedHigh (7.8)4.0%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 20267/14/20267/24/2026
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
AnalyzedHigh (7.5)1.2%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 20267/14/20267/24/2026
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
AnalyzedHigh (7.5)1.2%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 20267/14/20267/24/2026
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
AnalyzedCritical (9.8)0.29%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2017Microsoft Visual Studio 2019+27/14/20267/24/2026
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
AnalyzedHigh (7.5)1.2%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 2022Microsoft Visual Studio 20267/14/20267/24/2026
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
AnalyzedHigh (7.5)1.2%—Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2Microsoft Windows 10 22h2+97/14/20267/24/2026
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
AnalyzedHigh (7.5)1.2%—Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 21h2Microsoft Windows 10 22h2+97/14/20267/24/2026
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
AnalyzedHigh (7.5)1.2%—Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows Server 2016+47/14/20267/24/2026
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
AnalyzedHigh (7.5)1.2%—Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows Server 2016+47/14/20267/24/2026
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
AnalyzedHigh (7.5)1.2%—Microsoft .net FrameworkMicrosoft Azure Active Directory7/14/20267/24/2026
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
AnalyzedHigh (7.5)1.7%—Microsoft .net FrameworkMicrosoft Azure Active Directory7/14/20267/24/2026
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
Orbitaley — Vulnerabilities