.NET

Everything TechSec Observer has reported about .NET: 2 stories, newest first. Part of our Vulnerabilities coverage.

Microsoft issues .NET 8-11 patches to seal Windows Desktop remote info disclosure flaw across all architectures

A remote information disclosure flaw in Windows Desktop runtimes has been fixed in updated NuGet packages for versions 8, 9, 10 and 11.

Oct 14, 2026

Vulnerabilities

Microsoft patches .NET 8-11 Pkcs flaw causing unauthenticated CPU exhaustion via malformed X.509 data

Microsoft has released updates for System.Security.Cryptography.Pkcs to address a high-severity denial of service vulnerability triggered by inefficient algorithmic complexity.

Oct 14, 2026