https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T08:13:43.841203+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-62909 CVE-2026-62909 — .NET Elevation of Privilege Vulnerability 2026-09-28T08:13:43.842618+00:00

Affected: Microsoft .NET 10.0, Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.8

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

 https://db.gcve.eu/vuln/usn-8641-1 USN-8641-1 — dotnet8, dotnet10 vulnerabilities 2026-09-28T08:13:43.842668+00:00

Affected: Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet10, Ubuntu:24.04:LTS: dotnet8, Ubuntu:26.04:LTS: dotnet10

Miha Zupan discovered that .NET did not properly interpret certain HTTP requests. An attacker could possibly use this issue to perform request smuggling and bypass a security feature. (CVE-2026-62899)

Ivan Demchuk discovered that .NET did not properly handle the removal of sensitive information before storage or transfer. An attacker could possibly use this issue to disclose sensitive information. (CVE-2026-62900)

Kevin Gosse discovered that .NET did not properly check an input for a loop condition. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-62901)

Kevin Gosse discovered that .NET did not properly perform error checking when securing shared resources used for diagnostics IPC. An attacker could possibly use this issue to elevate privileges. (CVE-2026-62909)