USN-8641-1: .NET vulnerabilities
Miha Zupan discovered that .NET did not properly interpret certain HTTP
requests. An attacker could possibly use this issue to perform request
smuggling and bypass a security feature. (CVE-2026-62899)
Ivan Demchuk discovered that .NET did not properly handle the removal of
sensitive information before storage or transfer. An attacker could possibly
use this issue to disclose sensitive information. (CVE-2026-62900)
Kevin Gosse discovered that .NET did not properly check an input for a loop
condition. An attacker could possibly use this issue to cause a denial of
service. (CVE-2026-62901)
Kevin Gosse discovered that .NET did not properly perform error checking
when securing shared resources used for diagnostics IPC. An attacker could
possibly use this issue to elevate privileges. (CVE-2026-62909)