Search Vulnerabilities

OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle

MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade

OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path

Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment

Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)

ChilliCream GraphQL Platform: Utf8GraphQLParser Stack Overflow via Deeply Nested GraphQL Documents

Malicious code in wpfuihelpercore (NuGet)

Malicious code in jjrawlins.cdkiampolicybuilderhelper (NuGet)

MsQuic has a Remote Elevation of Privilege Vulnerability

Defense in Depth update for NuGet Client

Kiota: Code Generation Literal Injection

DotNetNuke.Core security code analysis rules triggered

ImageMagick has a memory leak in PNG encoder when writing a MNG image

ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts

ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value

ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete

ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing

ImageMagick has a heap-buffer-overflow in FTXT encoder

Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability