https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 21:23:08 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-70197 <p>Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.</p> <p>Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.</p> https://db.gcve.eu/vuln/fkie_cve-2026-70197 https://db.gcve.eu/vuln/ghsa-4mpw-cpwj-hxxj <p><strong>Affected:</strong> NuGet: Microsoft.NETCore.App.Runtime.win-arm64, NuGet: Microsoft.NETCore.App.Runtime.win-x64, NuGet: Microsoft.NETCore.App.Runtime.win-x86</p> <p>## Executive summary</p> <p>Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Sockets. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.</p> <p>On Windows, reusing a `SocketAsyncEventArgs` instance across IPv4 and IPv6 datagram sockets can retain an undersized cached native address buffer, allowing an unauthenticated out-of-bounds write during `ReceiveFromAsync`.</p> <p>## Announcement</p> <p>Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/466</p> <p>## CVSS Details</p> <p>- **Version:** 3.1 - **Severity:** High - **Score:** 8.1 - **Vector:** `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`</p> <p>- **Weakness:** CWE-787 (Out-of-bounds Write) ## Affected Platforms</p> <p>- **Platforms:** Windows - **Architectures:** All</p> <p>## &lt;a name=&#34;affected-packages&#34;&gt;&lt;/a&gt;Affected Packages</p> <p>The vulnerability affects Microsoft .NET projects that use an affected package version listed below.</p> <p>Package name | Affected version | Patched version ------------ | ---------------- | --------------- [Microsoft.NETCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.win-arm) | &gt;= 8.0.0, &lt;= 8.0.31 | 8.0.32 [Microsoft.NETCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.win-arm64) | &gt;= 8.0.0, &lt;= 8.0.31 | 8.0.32 [Microsoft.NETCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.win-x…</p> <p><strong>Affected:</strong> NuGet: Microsoft.NETCore.App.Runtime.win-arm64, NuGet: Microsoft.NETCore.App.Runtime.win-x64, NuGet: Microsoft.NETCore.App.Runtime.win-x86</p> <p>## Executive summary</p> <p>Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Sockets. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.</p> <p>On Windows, reusing a `SocketAsyncEventArgs` instance across IPv4 and IPv6 datagram sockets can retain an undersized cached native address buffer, allowing an unauthenticated out-of-bounds write during `ReceiveFromAsync`.</p> <p>## Announcement</p> <p>Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/466</p> <p>## CVSS Details</p> <p>- **Version:** 3.1 - **Severity:** High - **Score:** 8.1 - **Vector:** `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`</p> <p>- **Weakness:** CWE-787 (Out-of-bounds Write) ## Affected Platforms</p> <p>- **Platforms:** Windows - **Architectures:** All</p> <p>## &lt;a name=&#34;affected-packages&#34;&gt;&lt;/a&gt;Affected Packages</p> <p>The vulnerability affects Microsoft .NET projects that use an affected package version listed below.</p> <p>Package name | Affected version | Patched version ------------ | ---------------- | --------------- [Microsoft.NETCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.win-arm) | &gt;= 8.0.0, &lt;= 8.0.31 | 8.0.32 [Microsoft.NETCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.win-arm64) | &gt;= 8.0.0, &lt;= 8.0.31 | 8.0.32 [Microsoft.NETCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.win-x…</p> https://db.gcve.eu/vuln/ghsa-4mpw-cpwj-hxxj https://db.gcve.eu/vuln/ncsc-2026-0426 NCSC-2026-0426 https://db.gcve.eu/vuln/ncsc-2026-0426