https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T03:57:19.529227+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-35390 CVE-2023-35390 — .NET and Visual Studio Remote Code Execution Vulnerability 2026-10-10T03:57:19.533006+00:00

Affected: Microsoft .NET 6.0, Microsoft .NET 7.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6

.NET and Visual Studio Remote Code Execution Vulnerability

 https://vulnerability.circl.lu/vuln/usn-6278-2 USN-6278-2 — dotnet6, dotnet7 vulnerabilities 2026-10-10T03:57:19.533131+00:00

Affected: Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7

USN-6278-1 fixed several vulnerabilities in .NET. This update provides the corresponding updates for Ubuntu 22.04 LTS.

Original advisory details:

It was discovered that .NET did properly handle the execution of certain commands. An attacker could possibly use this issue to achieve remote code execution. (CVE-2023-35390) Benoit Foucher discovered that .NET did not properly implement the QUIC stream limit in HTTP/3. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-38178) It was discovered that .NET did not properly handle the disconnection of potentially malicious clients interfacing with a Kestrel server. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-38180)