Artur Stetsko

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network. SignalR connections are not consistently bound to the identity negotiated at connection establishment, which enables injected messages to execute Hub invocations as the victim.

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to cause a denial of service over a network. Specifically, Minimal API validation repeatedly copies a growing validation-error dictionary, which enables attacker-controlled collections to trigger quadratic CPU work after the client disconnects.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to cause a denial of service over a network.

A heap-based buffer overflow occurs in Windows Hyper-V, which is a memory corruption issue where data exceeds the allocated buffer on the heap. This allows an authorized attacker to execute arbitrary code locally or remotely, potentially compromising the entire system.

A heap-based buffer overflow occurs in Windows Hyper-V, which allows an authorized attacker to execute code locally. This issue can also enable remote attackers to execute arbitrary code and affect the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated memory block than it can hold.

A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to arbitrary code execution or system crashes.