| CVE-2026-96957 | 높음8.8 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | 13/10/2026 |
| CVE-2026-96222 | 높음7.4 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 13/10/2026 |
| CVE-2026-88092 | 심각9.4 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network. | 13/10/2026 |
| CVE-2026-85790 | 보통5.9 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | 13/10/2026 |
| CVE-2026-77907 | 높음8.8 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-77906 | 높음8.8 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-71328 | 높음8.8 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-69806 | 높음7.0 | Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. | 08/09/2026 |
| CVE-2026-69805 | 높음8.1 | External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network. | 08/09/2026 |
| CVE-2026-69439 | 높음8.8 | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 08/09/2026 |
| CVE-2026-69304 | 보통5.9 | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 08/09/2026 |
| CVE-2026-58649 | 보통6.5 | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-70354 | 높음7.8 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-62909 | 높음7.8 | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | 11/08/2026 |
| CVE-2026-62902 | 보통6.5 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. | 11/08/2026 |
| CVE-2026-62901 | 높음7.5 | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. | 11/08/2026 |
| CVE-2026-62900 | 보통5.9 | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network. | 11/08/2026 |
| CVE-2026-62899 | 보통5.9 | Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network. | 11/08/2026 |
| CVE-2026-62898 | 높음7.5 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | 11/08/2026 |
| CVE-2026-62897 | 높음7.0 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | 11/08/2026 |