{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft System.Security.Cryptography.Pkcs: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--system-security-cryptography-pkcs/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--system-security-cryptography-pkcs/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70162/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70162/",
   "title": "CVE-2026-70162 · Microsoft Visual Studio 2022 version 17.14 · disclosed",
   "content_text": "A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.\nA remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.\nThe update addresses the vulnerability by correcting how the .NET web application handles web requests.",
   "date_published": "2026-10-13T19:01:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70162/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70162/",
   "title": "CVE-2026-70162 · Microsoft Visual Studio 2022 version 17.14 · fixed in Chainguard (actions-runner 2.338.0-r2 and 10 more)",
   "content_text": "Fixed versions: actions-runner 2.338.0-r2, dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, eco-dotnet-apidiff 0.1.7-r0, ilspycmd 11.1-r1, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70162/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70162/",
   "title": "CVE-2026-70162 · Microsoft Visual Studio 2022 version 17.14 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: System.Security.Cryptography.Pkcs 10.0.13, System.Security.Cryptography.Pkcs 11.0.0-rc.2, System.Security.Cryptography.Pkcs 8.0.2, System.Security.Cryptography.Pkcs 9.0.21.",
   "date_published": "2026-10-13T19:01:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70162/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70162/",
   "title": "CVE-2026-70162 · Microsoft Visual Studio 2022 version 17.14 · fixed in Wolfi (dotnet-10-sdk 10.0.113-r1 and 8 more)",
   "content_text": "Fixed versions: dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, ilspycmd 11.1-r1, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · disclosed",
   "content_text": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Chainguard (actions-runner 2.338.0-r2 and 10 more)",
   "content_text": "Fixed versions: actions-runner 2.338.0-r2, dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, eco-dotnet-apidiff 0.1.7-r0, ilspycmd 11.1-r1, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: System.Security.Cryptography.Pkcs 10.0.13, System.Security.Cryptography.Pkcs 11.0.0-rc.2, System.Security.Cryptography.Pkcs 8.0.2, System.Security.Cryptography.Pkcs 9.0.21.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84008/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84008/",
   "title": "CVE-2026-84008 · Microsoft .NET Framework 3.5 · fixed in Wolfi (dotnet-10-sdk 10.0.113-r1 and 8 more)",
   "content_text": "Fixed versions: dotnet-10-sdk 10.0.113-r1, dotnet-8-sdk 8.0.132-r0, dotnet-9-sdk 9.0.122-r0, dotnet-sdk-10.0.2 10.0.204-r9, dotnet-sdk-10.0.3 10.0.303-r7, dotnet-sdk-10.0.4 10.0.402-r0, dotnet-sdk-stage0-10 10.0.113-r0, ilspycmd 11.1-r1, promitor 2.16.1-r1.",
   "date_published": "2026-10-13T19:01:15Z"
  }
 ]
}