dotnet_mitigations.md

March 11, 2022 ยท View on GitHub

We list mitigations added in all Microsoft .NET framework versions.

Version (and date)MitigationReferences
MS12-035check the type being set during the ISerializable.GetObjectData call is in an assembly signed with the same public key (avoid partial trust abusing round-trip serialization)1