Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

.NET Security Feature Bypass Vulnerability

Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

.NET Information Disclosure Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

.NET Elevation of Privilege Vulnerability

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

.NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability