https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T19:57:44.994075+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-36049 CVE-2023-36049 — .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability 2026-10-09T19:57:44.996562+00:00

Affected: Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.7, Microsoft Visual Studio 2022 version 17.6, Microsoft .NET 8.0, Microsoft .NET 6.0, Microsoft .NET 7.0, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.8, Microsoft .NET Framework 3.5 AND 4.8 and 9 more

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

 https://vulnerability.circl.lu/vuln/usn-6480-1 USN-6480-1 — dotnet6, dotnet7, dotnet8 vulnerabilities 2026-10-09T19:57:44.996740+00:00

Affected: Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7

Barry Dorrans discovered that .NET did not properly implement certain security features for Blazor server forms. An attacker could possibly use this issue to bypass validation, which could trigger unintended actions. (CVE-2023-36558)

Piotr Bazydlo discovered that .NET did not properly handle untrusted URIs provided to System.Net.WebRequest.Create. An attacker could possibly use this issue to inject arbitrary commands to backend FTP servers. (CVE-2023-36049)