{"schema_version":1,"title":"System.Security.Cryptography.Xml (NuGet) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in System.Security.Cryptography.Xml (NuGet): 4 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-96222, was published on 13 October 2026. 4 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/system-security-cryptography-xml","json_url":"https://junglewise.ai/threats/technologies/system-security-cryptography-xml.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/system-security-cryptography-xml","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":12,"all_time":16,"critical":0,"exploited":0,"last_7_days":4,"last_30_days":4,"last_90_days":4,"last_365_days":12},"latest":[{"cve":"CVE-2026-96222","cvss":7.4,"epss":0.0058,"slug":"cve-2026-96222-microsoft-security-advisory-net-spoofing-vulnerability","title":"Microsoft .NET certificate validation bypass in Cryptography.Xml","severity":"high","exploited":false,"published_at":"2026-10-13T20:45:13+00:00","url":"https://junglewise.ai/threats/cve-2026-96222-microsoft-security-advisory-net-spoofing-vulnerability"},{"cve":"CVE-2026-96960","cvss":7.5,"epss":0.0106,"slug":"cve-2026-96960-microsoft-security-advisory-net-and-visual-studio-denial-of","title":"Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.67+00:00","url":"https://junglewise.ai/threats/cve-2026-96960-microsoft-security-advisory-net-and-visual-studio-denial-of"},{"cve":"CVE-2026-96959","cvss":7.5,"epss":0.0077,"slug":"cve-2026-96959-microsoft-security-advisory-net-and-visual-studio-denial-of","title":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.527+00:00","url":"https://junglewise.ai/threats/cve-2026-96959-microsoft-security-advisory-net-and-visual-studio-denial-of"},{"cve":"CVE-2026-96958","cvss":7.5,"epss":0.0106,"slug":"cve-2026-96958-microsoft-security-advisory-net-and-visual-studio-denial-of","title":"Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.387+00:00","url":"https://junglewise.ai/threats/cve-2026-96958-microsoft-security-advisory-net-and-visual-studio-denial-of"},{"cve":"CVE-2026-50648","cvss":7.5,"epss":0.0117,"slug":"cve-2026-50648-microsoft-net-framework-denial-of-service-via-resource-exhaustion","title":"Microsoft .NET Framework denial of service via resource exhaustion","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:37.937+00:00","url":"https://junglewise.ai/threats/cve-2026-50648-microsoft-net-framework-denial-of-service-via-resource-exhaustion"},{"cve":"CVE-2026-50527","cvss":7.5,"epss":0.0117,"slug":"cve-2026-50527-microsoft-net-framework-stack-based-buffer-overflow","title":"Microsoft .NET Framework stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:37.363+00:00","url":"https://junglewise.ai/threats/cve-2026-50527-microsoft-net-framework-stack-based-buffer-overflow"},{"cve":"CVE-2026-50525","cvss":7.5,"epss":0.0117,"slug":"cve-2026-50525-microsoft-net-resource-exhaustion-denial-of-service","title":"Microsoft .NET resource exhaustion denial of service","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:37.12+00:00","url":"https://junglewise.ai/threats/cve-2026-50525-microsoft-net-resource-exhaustion-denial-of-service"},{"cve":"CVE-2026-47304","cvss":8.1,"epss":0.0029,"slug":"cve-2026-47304-microsoft-net-improper-cryptographic-signature-verification","title":"Microsoft .NET improper cryptographic signature verification","severity":"high","exploited":false,"published_at":"2026-07-14T19:17:08.83+00:00","url":"https://junglewise.ai/threats/cve-2026-47304-microsoft-net-improper-cryptographic-signature-verification"},{"cve":"CVE-2026-47302","cvss":7.5,"epss":0.0117,"slug":"cve-2026-47302-microsoft-net-denial-of-service-via-resource-exhaustion","title":"Microsoft .NET denial of service via resource exhaustion","severity":"high","exploited":false,"published_at":"2026-07-14T19:17:08.54+00:00","url":"https://junglewise.ai/threats/cve-2026-47302-microsoft-net-denial-of-service-via-resource-exhaustion"},{"cve":"CVE-2026-33116","cvss":7.5,"epss":0.0244,"slug":"cve-2026-33116-microsoft-net-infinite-loop-in-xmldecryptiontransform","title":"Microsoft .NET infinite loop in XmlDecryptionTransform","severity":"high","exploited":false,"published_at":"2026-04-14T18:17:33.903+00:00","url":"https://junglewise.ai/threats/cve-2026-33116-microsoft-net-infinite-loop-in-xmldecryptiontransform"},{"cve":"CVE-2026-32203","cvss":7.5,"epss":0.0244,"slug":"cve-2026-32203-microsoft-net-and-visual-studio-stack-overflow-denial-of-service","title":"Microsoft .NET and Visual Studio stack overflow denial of service","severity":"high","exploited":false,"published_at":"2026-04-14T18:17:27.7+00:00","url":"https://junglewise.ai/threats/cve-2026-32203-microsoft-net-and-visual-studio-stack-overflow-denial-of-service"},{"cve":"CVE-2026-26171","cvss":7.5,"epss":0.0226,"slug":"cve-2026-26171-microsoft-net-denial-of-service-via-xml-entity-expansion","title":"Microsoft .NET denial of service via XML entity expansion","severity":"high","exploited":false,"published_at":"2026-04-14T18:16:51.577+00:00","url":"https://junglewise.ai/threats/cve-2026-26171-microsoft-net-denial-of-service-via-xml-entity-expansion"},{"cve":"CVE-2022-34716","cvss":3.1,"epss":0.0227,"slug":"cve-2022-34716-net-information-disclosure-vulnerability","title":".NET Information Disclosure Vulnerability","severity":"low","exploited":false,"published_at":"2024-02-03T00:47:54+00:00","url":"https://junglewise.ai/threats/cve-2022-34716-net-information-disclosure-vulnerability"},{"cvss":3.1,"slug":"duplicate-advisory-net-information-disclosure-vulnerability-73e25e1b","title":"Duplicate Advisory: .NET Information Disclosure Vulnerability","severity":"low","exploited":false,"published_at":"2022-08-10T00:00:18+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-net-information-disclosure-vulnerability-73e25e1b"},{"cve":"CVE-2018-0765","cvss":3,"epss":0.0828,"slug":"cve-2018-0765-denial-of-service-vulnerability-exists-when-net-and-net-core","title":"Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents","severity":"low","exploited":false,"published_at":"2018-10-16T19:54:06+00:00","url":"https://junglewise.ai/threats/cve-2018-0765-denial-of-service-vulnerability-exists-when-net-and-net-core"},{"cve":"CVE-2018-0764","cvss":3,"epss":0.0889,"slug":"cve-2018-0764-denial-of-service-vulnerability-exists-when-net-and-net-core","title":"Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents","severity":"low","exploited":false,"published_at":"2018-10-16T17:34:00+00:00","url":"https://junglewise.ai/threats/cve-2018-0764-denial-of-service-vulnerability-exists-when-net-and-net-core"}],"weekly":[{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Microsoft.ChakraCore (NuGet)","slug":"microsoft-chakracore","vulnerabilities":247,"url":"https://junglewise.ai/threats/technologies/microsoft-chakracore"},{"name":"Magick.NET-Q16-AnyCPU (NuGet)","slug":"magick-net-q16-anycpu","vulnerabilities":165,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-anycpu"},{"name":"Magick.NET-Q16-HDRI-AnyCPU (NuGet)","slug":"magick-net-q16-hdri-anycpu","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-anycpu"},{"name":"Magick.NET-Q8-AnyCPU (NuGet)","slug":"magick-net-q8-anycpu","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/magick-net-q8-anycpu"},{"name":"Magick.NET-Q16-HDRI-x86 (NuGet)","slug":"magick-net-q16-hdri-x86","vulnerabilities":159,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-x86"},{"name":"Magick.NET-Q16-x86 (NuGet)","slug":"magick-net-q16-x86","vulnerabilities":158,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-x86"},{"name":"Magick.NET-Q8-x86 (NuGet)","slug":"magick-net-q8-x86","vulnerabilities":158,"url":"https://junglewise.ai/threats/technologies/magick-net-q8-x86"},{"name":"Magick.NET-Q16-arm64 (NuGet)","slug":"magick-net-q16-arm64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-arm64"},{"name":"Magick.NET-Q16-HDRI-OpenMP-arm64 (NuGet)","slug":"magick-net-q16-hdri-openmp-arm64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-openmp-arm64"},{"name":"Magick.NET-Q16-HDRI-x64 (NuGet)","slug":"magick-net-q16-hdri-x64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-x64"},{"name":"Magick.NET-Q16-OpenMP-arm64 (NuGet)","slug":"magick-net-q16-openmp-arm64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-openmp-arm64"},{"name":"Magick.NET-Q16-OpenMP-x64 (NuGet)","slug":"magick-net-q16-openmp-x64","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-openmp-x64"}],"technology":{"hub":true,"name":"System.Security.Cryptography.Xml (NuGet)","slug":"system-security-cryptography-xml","vendor":{"hub":true,"name":"NuGet","slug":"nuget","url":"https://junglewise.ai/threats/vendors/nuget"},"aliases":[],"homepage":"https://www.nuget.org/packages/System.Security.Cryptography.Xml/","repo_url":"https://github.com/dotnet/runtime","description":"A .NET library that provides classes for creating and working with XML digital signatures and XML encryption.","url":"https://junglewise.ai/threats/technologies/system-security-cryptography-xml"},"most_severe":[{"cve":"CVE-2026-47304","cvss":8.1,"epss":0.0029,"slug":"cve-2026-47304-microsoft-net-improper-cryptographic-signature-verification","title":"Microsoft .NET improper cryptographic signature verification","severity":"high","exploited":false,"published_at":"2026-07-14T19:17:08.83+00:00","url":"https://junglewise.ai/threats/cve-2026-47304-microsoft-net-improper-cryptographic-signature-verification"},{"cve":"CVE-2026-33116","cvss":7.5,"epss":0.0244,"slug":"cve-2026-33116-microsoft-net-infinite-loop-in-xmldecryptiontransform","title":"Microsoft .NET infinite loop in XmlDecryptionTransform","severity":"high","exploited":false,"published_at":"2026-04-14T18:17:33.903+00:00","url":"https://junglewise.ai/threats/cve-2026-33116-microsoft-net-infinite-loop-in-xmldecryptiontransform"},{"cve":"CVE-2026-32203","cvss":7.5,"epss":0.0244,"slug":"cve-2026-32203-microsoft-net-and-visual-studio-stack-overflow-denial-of-service","title":"Microsoft .NET and Visual Studio stack overflow denial of service","severity":"high","exploited":false,"published_at":"2026-04-14T18:17:27.7+00:00","url":"https://junglewise.ai/threats/cve-2026-32203-microsoft-net-and-visual-studio-stack-overflow-denial-of-service"},{"cve":"CVE-2026-26171","cvss":7.5,"epss":0.0226,"slug":"cve-2026-26171-microsoft-net-denial-of-service-via-xml-entity-expansion","title":"Microsoft .NET denial of service via XML entity expansion","severity":"high","exploited":false,"published_at":"2026-04-14T18:16:51.577+00:00","url":"https://junglewise.ai/threats/cve-2026-26171-microsoft-net-denial-of-service-via-xml-entity-expansion"},{"cve":"CVE-2026-50648","cvss":7.5,"epss":0.0117,"slug":"cve-2026-50648-microsoft-net-framework-denial-of-service-via-resource-exhaustion","title":"Microsoft .NET Framework denial of service via resource exhaustion","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:37.937+00:00","url":"https://junglewise.ai/threats/cve-2026-50648-microsoft-net-framework-denial-of-service-via-resource-exhaustion"},{"cve":"CVE-2026-50527","cvss":7.5,"epss":0.0117,"slug":"cve-2026-50527-microsoft-net-framework-stack-based-buffer-overflow","title":"Microsoft .NET Framework stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:37.363+00:00","url":"https://junglewise.ai/threats/cve-2026-50527-microsoft-net-framework-stack-based-buffer-overflow"},{"cve":"CVE-2026-50525","cvss":7.5,"epss":0.0117,"slug":"cve-2026-50525-microsoft-net-resource-exhaustion-denial-of-service","title":"Microsoft .NET resource exhaustion denial of service","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:37.12+00:00","url":"https://junglewise.ai/threats/cve-2026-50525-microsoft-net-resource-exhaustion-denial-of-service"},{"cve":"CVE-2026-47302","cvss":7.5,"epss":0.0117,"slug":"cve-2026-47302-microsoft-net-denial-of-service-via-resource-exhaustion","title":"Microsoft .NET denial of service via resource exhaustion","severity":"high","exploited":false,"published_at":"2026-07-14T19:17:08.54+00:00","url":"https://junglewise.ai/threats/cve-2026-47302-microsoft-net-denial-of-service-via-resource-exhaustion"},{"cve":"CVE-2026-96960","cvss":7.5,"epss":0.0106,"slug":"cve-2026-96960-microsoft-security-advisory-net-and-visual-studio-denial-of","title":"Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.67+00:00","url":"https://junglewise.ai/threats/cve-2026-96960-microsoft-security-advisory-net-and-visual-studio-denial-of"},{"cve":"CVE-2026-96958","cvss":7.5,"epss":0.0106,"slug":"cve-2026-96958-microsoft-security-advisory-net-and-visual-studio-denial-of","title":"Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.","severity":"high","exploited":false,"published_at":"2026-10-13T19:22:08.387+00:00","url":"https://junglewise.ai/threats/cve-2026-96958-microsoft-security-advisory-net-and-visual-studio-denial-of"}],"generated_at":"2026-10-19T03:07:00.200186+00:00"}