Bugs fixes in "dotnet11"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-96960 | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-20 |
| CVE | CVE-2026-96959 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-20 |
| CVE | CVE-2026-96958 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-20 |
| CVE | CVE-2026-96957 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-20 |
| CVE | CVE-2026-96238 | Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-20 |
| CVE | CVE-2026-96236 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-20 |
| CVE | CVE-2026-96233 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-20 |
| CVE | CVE-2026-96231 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE | CVE-2026-96230 | Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code | 2026-10-20 |
| CVE | CVE-2026-96225 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE | CVE-2026-92707 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Objec | 2026-10-20 |
| CVE | CVE-2026-88092 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering | 2026-10-20 |
| CVE | CVE-2026-84008 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-20 |
| CVE | CVE-2026-70194 | Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-20 |
| CVE | CVE-2026-70188 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security | 2026-10-20 |
| CVE | CVE-2026-70183 | Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate | 2026-10-20 |
| CVE | CVE-2026-70159 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-20 |
| CVE | CVE-2026-69651 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-20 |
| CVE | CVE-2026-66822 | Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network. | 2026-10-20 |
| CVE | CVE-2026-58280 | Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-20 |
About
-
Send Feedback to @ubuntu_updates
