Important: .NET 9.0 security update

Important: .NET 8.0 security update

Important: .NET 9.0 security update

Important: .NET 8.0 security update

ELSA-2025-18153: .NET 9.0 security update (IMPORTANT)

ELSA-2025-18152: .NET 8.0 security update (IMPORTANT)

ELSA-2025-18151: .NET 9.0 security update (IMPORTANT)

ELSA-2025-18150: .NET 9.0 security update (IMPORTANT)

ELSA-2025-18149: .NET 8.0 security update (IMPORTANT)

ELSA-2025-18148: .NET 8.0 security update (IMPORTANT)

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.

.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability

Уязвимость программных платформ Microsoft .NET Framework, .NET и средства разработки программного обеспечения Microsoft Visual Studio, связанная с недостаточно стойким шифрованием данных, позволяющая нарушителю раскрыть защищаемую информацию

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

ASP.NET Security Feature Bypass Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.