https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 08:20:19 +0000 https://db.gcve.eu/vuln/cve-2026-62900 <p><strong>Affected:</strong> Microsoft .NET 10.0, Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.8</p> <p>Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Affected:</strong> Microsoft .NET 10.0, Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.8</p> <p>Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.</p> https://db.gcve.eu/vuln/cve-2026-62900 https://db.gcve.eu/vuln/usn-8641-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet10, Ubuntu:24.04:LTS: dotnet8, Ubuntu:26.04:LTS: dotnet10</p> <p>Miha Zupan discovered that .NET did not properly interpret certain HTTP requests. An attacker could possibly use this issue to perform request smuggling and bypass a security feature. (CVE-2026-62899)</p> <p>Ivan Demchuk discovered that .NET did not properly handle the removal of sensitive information before storage or transfer. An attacker could possibly use this issue to disclose sensitive information. (CVE-2026-62900)</p> <p>Kevin Gosse discovered that .NET did not properly check an input for a loop condition. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-62901)</p> <p>Kevin Gosse discovered that .NET did not properly perform error checking when securing shared resources used for diagnostics IPC. An attacker could possibly use this issue to elevate privileges. (CVE-2026-62909)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet10, Ubuntu:24.04:LTS: dotnet8, Ubuntu:26.04:LTS: dotnet10</p> <p>Miha Zupan discovered that .NET did not properly interpret certain HTTP requests. An attacker could possibly use this issue to perform request smuggling and bypass a security feature. (CVE-2026-62899)</p> <p>Ivan Demchuk discovered that .NET did not properly handle the removal of sensitive information before storage or transfer. An attacker could possibly use this issue to disclose sensitive information. (CVE-2026-62900)</p> <p>Kevin Gosse discovered that .NET did not properly check an input for a loop condition. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-62901)</p> <p>Kevin Gosse discovered that .NET did not properly perform error checking when securing shared resources used for diagnostics IPC. An attacker could possibly use this issue to elevate privileges. (CVE-2026-62909)</p> https://db.gcve.eu/vuln/usn-8641-1