| CVE-2026-111497KEV | CRÍTICO9.8 | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code us | 22/10/2026 |
| CVE-2026-96960 | ALTO7.5 | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | 13/10/2026 |
| CVE-2026-96959 | ALTO7.5 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 13/10/2026 |
| CVE-2026-96958 | ALTO7.5 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 13/10/2026 |
| CVE-2026-96957 | ALTO8.8 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | 13/10/2026 |
| CVE-2026-96222 | ALTO7.4 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 13/10/2026 |
| CVE-2026-71328 | ALTO8.8 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-69806 | ALTO7.0 | Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. | 08/09/2026 |
| CVE-2026-69439 | ALTO8.8 | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 08/09/2026 |
| CVE-2026-69304 | MEDIO5.9 | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 08/09/2026 |
| CVE-2026-58649 | MEDIO6.5 | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-70354 | ALTO7.8 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-62909 | ALTO7.8 | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | 11/08/2026 |
| CVE-2026-62902 | MEDIO6.5 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. | 11/08/2026 |
| CVE-2026-62901 | ALTO7.5 | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. | 11/08/2026 |
| CVE-2026-62900 | MEDIO5.9 | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network. | 11/08/2026 |
| CVE-2026-62899 | MEDIO5.9 | Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network. | 11/08/2026 |
| CVE-2026-62898 | ALTO7.5 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | 11/08/2026 |
| CVE-2026-62897 | ALTO7.0 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-62886 | ALTO7.8 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. | 11/08/2026 |