.NET and Visual Studio Remote Code Execution Vulnerability

CVE-2026-49940 medium · 6.5

Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parse

CVE-2026-49941 high · 7.5

Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmas

CVE-2026-49942 high · 7.3

Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One (U+0661)

CVE-2026-46739 medium · 5.3

Net::Statsd versions before 0.13 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could i

CVE-2026-8722 medium · 6.5

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untruste

CVE-2026-45584 high · 8.1

Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.