Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability

CVE-2026-96231

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability

CVE-2026-85790

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability

CVE-2026-66822

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability

CVE-2026-88092

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability

CVE-2026-70188

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability

CVE-2026-96236

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability

CVE-2026-70197

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability

CVE-2026-69651

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability

CVE-2026-102870

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in the

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability

CVE-2026-96960

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability

CVE-2026-96233

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability

CVE-2026-70162

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests

CVE-2026-105795

### Impact When generating an API plugin manifest from an attacker-controlled or compromised OpenAPI description, Kiota

历史摘要 · 未重新核验 · GitHub Advisory

Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

CVE-2026-105796

### Impact An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled

历史摘要 · 未重新核验 · GitHub Advisory

MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL

CVE-2026-105794

# Summary Improper TLS hostname verification allows a man-in-the-middle (MITM) attack on MsQuic. # Details Only MsQu

历史摘要 · 未重新核验 · GitHub Advisory

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

CVE-2026-100368

### Impact An OS command injection vulnerability exists in the PowerShell and Cmd shell wrappers provided by the `CliInv

历史摘要 · 未重新核验 · GitHub Advisory

CliInvoke: Argument Injection in Extensibility Runner Factory

CVE-2026-100369

### Impact An argument-injection vulnerability exists in the `CliInvoke` package's runner factory: `RunnerProcessFactory

历史摘要 · 未重新核验 · GitHub Advisory

Steeltoe: Header-forwarded client cert lacks proof of private-key possession

CVE-2026-81868

### Summary When Steeltoe's certificate-based authorization (`UseCertificateAuthorization`) is configured, the default

历史摘要 · 未重新核验 · GitHub Advisory

Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)

CVE-2026-81516

## Summary Steeltoe's Consul discovery client parses the `secure` metadata field on each registered service instance us

历史摘要 · 未重新核验 · GitHub Advisory