Everything Vuln Post has reported about .NET: 5 stories, newest first. Part of our Vulnerabilities coverage.
Security teams must upgrade Amazon S3 Encryption Client for .NET to patch CVE-2026-110310, which allows attackers to decrypt data via legacy padding downgrades.
Microsoft released updates for .NET Desktop Runtime to fix a network-accessible privilege escalation flaw affecting versions 8 through 11.
Microsoft has released updates for .NET WPF runtimes to fix a high-severity remote code execution vulnerability caused by unsafe data deserialization.
A high-severity out-of-bounds write flaw in .NET allows remote code execution on Windows. Patched runtimes are now available for versions 8 through 11.
High-severity remote code execution in .NET WPF allows attackers to run code via malicious XPS hyperlinks. Patches are available for versions 8 through 11.