Microsoft has released patches for a high-severity denial-of-service vulnerability in .NET that allows remote attackers to crash services via uncontrolled recursion.
Microsoft has released updates for System.Security.Cryptography.Xml to fix a high-severity flaw that allows attackers to deny service via unbounded resource use.