Browse CVEs by Ecosystem and Severity

ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

ImageSharp: ICC LUT16 output channel count can write beyond Vector4

ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index

ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write

ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp

Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

CliInvoke: Argument Injection in Extensibility Runner Factory

MPXJ: XXE Vulnerability in MerlinReader

Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)

Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

SSH.NET: ScpClient allows server-side RCE via default SCP path handling

Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansion

OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability

SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)

SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing

SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames

Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability

Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability

SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)

Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName

Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF

Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator

Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator

Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator

Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection

Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability

Microsoft Security Advisory CVE-2026-47300 – .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability

Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability

Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability