https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T11:31:24.809185+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-38229 CVE-2024-38229 — .NET and Visual Studio Remote Code Execution Vulnerability 2026-10-09T11:31:24.812920+00:00

Affected: Microsoft .NET 8.0, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.11, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8

.NET and Visual Studio Remote Code Execution Vulnerability

 https://vulnerability.circl.lu/vuln/usn-7058-1 USN-7058-1 — dotnet6, dotnet8 vulnerabilities 2026-10-09T11:31:24.813188+00:00

Affected: Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet8

Brennan Conroy discovered that the .NET Kestrel web server did not properly handle closing HTTP/3 streams under certain circumstances. An attacker could possibly use this issue to achieve remote code execution. This vulnerability only impacted .NET8. (CVE-2024-38229)

It was discovered that .NET components designed to process malicious input were susceptible to hash flooding attacks. An attacker could possibly use this issue to cause a denial of service, resulting in a crash. (CVE-2024-43483)

It was discovered that the .NET System.IO.Packaging namespace did not properly process SortedList data structures. An attacker could possibly use this issue to cause a denial of service, resulting in a crash. (CVE-2024-43484)

It was discovered that .NET did not properly handle the deserialization of of certain JSON properties. An attacker could possibly use this issue to cause a denial of service, resulting in a crash. (CVE-2024-43485)