← Back

.net Framework

.net_framework

Vendor: Microsoft • 183 CVEs

CVEs (183)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
23.net Framework
Digital Image ProDigital Image Suite+20 more
Apr 16, 2026
Sep 28, 2004
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM fiel...Show more
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.Show less
1Microsoft
1.net Framework
Apr 16, 2026
Jul 26, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter.
1Microsoft
1.net Framework
Apr 16, 2026
Jul 26, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies while in StateServer mode.