Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

CVE-2026-81515

## Summary Steeltoe's Eureka discovery client deserializes the registry response as a single unit. If any registered in

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

CVE-2026-81192

### Summary The `OpenTelemetry.Resources.Host` NuGet package is affected by an untrusted search path vulnerability on m

历史摘要 · 未重新核验 · GitHub Advisory

SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)

## Summary `TurnServer.ReceiveUdpAsync` places its generic `catch (Exception)` OUTSIDE the `while` receive loop, and `St

历史摘要 · 未重新核验 · GitHub Advisory

SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing

## Summary `SctpSackChunk.ParseChunk` reads the `numGapAckBlocks` and `numDuplicateTSNs` fields (each up to 65535) direc

历史摘要 · 未重新核验 · GitHub Advisory

SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames

CVE-2026-48798

## Summary `ScpClient.Download(string directoryName, DirectoryInfo directoryInfo)` writes files and directories using n

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability

CVE-2026-62902

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability

CVE-2026-62871

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability

CVE-2026-62897

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability

CVE-2026-70354

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

CVE-2026-62909

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

CVE-2026-62886

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability

CVE-2026-62901

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability

CVE-2026-62899

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability

CVE-2026-62898

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow

CVE-2026-53466

An integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read and that can res

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability

CVE-2026-32203

## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in Sy

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged

CVE-2026-53467

In the MNG decoder there is a possible heap information disclosure because part of the pixels are left unchanged.

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability

CVE-2026-50651

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability

CVE-2026-50659

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability

CVE-2026-50525

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory