System.Security.Cryptography.Xml vulnerabilities
CVEs whose affected-version data names the System.Security.Cryptography.Xml package (nuget). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-96960High· 7.5Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
▾ TwilightSystem · System.Security.Cryptography.XmlEPSS 1.2%via NVD
CVE-2026-96959High· 7.5Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
▾ TwilightSystem · System.Security.Cryptography.XmlEPSS 0.97%via NVD
CVE-2026-96958High· 7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
▾ TwilightSystem · System.Security.Cryptography.XmlEPSS 1.2%via NVD
CVE-2026-96222High· 7.4Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
▾ TwilightSystem · System.Security.Cryptography.XmlEPSS 0.59%via NVD