Everything Threat Times has reported about .NET: 5 stories, newest first. Part of our Vulnerabilities coverage.
A deserialization flaw in .NET Windows Desktop Runtime allows remote code execution after user interaction, with patches now available for versions 8 through 11.
A high-severity vulnerability in Microsoft .NET allows remote code execution via an out-of-bounds write in socket handling.
Microsoft released updates for ASP.NET Core to fix a high-severity race condition that allows authorized attackers to bypass authorization decisions.
A heap-based buffer overflow in Microsoft QUIC allows unauthenticated remote code execution via crafted IPv6 packets, affecting multiple .NET versions.
A memory exhaustion bug in ASP.NET Core multipart processing allows remote attackers to crash services, with fixes now available for versions 8, 9 and 10.