MN
Product
Microsoft .NET Framework 3.5
On CISA KEVExploited in the wild
42
CVEs
3
On KEV
9.8
Max CVSS
16
New 30D
Severity mix
Critical 2High 37Medium 3Low 0
Watch
Add Microsoft .NET Framework 3.5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-0646 In wildKEV | 9.8 | Jan 14 | Microsoft .NET Framework Remote Code Execution Vulnerability Affected: Windows 10 Version 1607 for 32-bit Systems; Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; +1 more |
| CVE-2020-1147 In wildKEV | 7.8 | Jul 14 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Affected: Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation) |
| CVE-2024-29059 In wildKEV | 7.5 | Mar 22 | .NET Framework Information Disclosure Vulnerability Affected: 3.5.0 before 3.0.50727.8976 |
| CVE-2026-47304 | 9.8 | Jul 14 | .NET Security Feature Bypass Vulnerability Affected: 3.5.0 before 2.0.50727.8983 & 3.0.30729.8978 |
| CVE-2026-85363 | 8.8 | Oct 13 | .NET Framework Elevation of Privilege Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-83520 | 8.8 | Oct 13 | .NET Remote Code Execution Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-70035 | 8.8 | Oct 13 | .NET Framework Remote Code Execution Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-70007 | 8.8 | Oct 13 | .NET Framework Remote Code Execution Vulnerability Affected: 3.5.0 before 2.0.50727.8987 AND 3.0.30729.8982 |
| CVE-2026-96224 | 8.8 | Oct 13 | .NET Remote Code Execution Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-70174 | 8.8 | Oct 13 | .NET Remote Code Execution Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-62872 | 8.8 | Aug 11 | .NET Framework Elevation of Privilege Vulnerability Affected: 3.5.0 before 2.0.50727.9183 & 3.0.30729.9169 |
| CVE-2019-0613 | 8.8 | Mar 5 | A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully… Affected: Windows Server 2012; Windows Server 2012 (Server Core installation); Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation); +20 more |
| CVE-2026-70354 | 7.8 | Aug 11 | .NET Core Remote Code Execution Vulnerability Affected: 3.5.0 before 2.0.50727.8984 & 3.0.30729.8980 |
| CVE-2026-65810 | 7.8 | Aug 11 | .NET Framework Elevation of Privilege Vulnerability Affected: 3.5.0 before 2.0.50727.9183 & 3.0.30729.9169 |
| CVE-2026-62886 | 7.8 | Aug 11 | .NET Elevation of Privilege Vulnerability Affected: 3.5.0 before 2.0.50727.8987 AND 3.0.30729.8982 |
| CVE-2026-50650 | 7.8 | Jul 14 | .NET Framework Elevation of Privilege Vulnerability Affected: 3.5.0 before 2.0.50727.8983 & 3.0.30729.8978 |
| CVE-2026-50649 | 7.8 | Jul 14 | .NET Remote Code Execution Vulnerability Affected: 3.5.0 before 2.0.50727.9182 & 3.0.30729.9168 |
| CVE-2026-50646 | 7.8 | Jul 14 | .NET Framework Remote Code Execution Vulnerability Affected: 3.5.0 before 2.0.50727.8983 & 3.0.30729.8978 |
| CVE-2026-97801 | 7.5 | Oct 13 | .NET Framework Tampering Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-58280 | 7.5 | Oct 13 | .NET Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-97788 | 7.5 | Oct 13 | Active Directory Federation Services (AD FS) Information Disclosure Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-96960 | 7.5 | Oct 13 | .NET Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-96959 | 7.5 | Oct 13 | .NET Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-96958 | 7.5 | Oct 13 | .NET Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-96233 | 7.5 | Oct 13 | ASP.NET Core Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-84008 | 7.5 | Oct 13 | .NET Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-69651 | 7.5 | Oct 13 | .NET Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-50648 | 7.5 | Jul 14 | .NET Framework Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.8983 & 3.0.30729.8978 |
| CVE-2026-50527 | 7.5 | Jul 14 | .NET Framework Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.8983 & 3.0.30729.8978 |
| CVE-2026-50525 | 7.5 | Jul 14 | .NET Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.9182 & 3.0.30729.9168 |
| CVE-2026-47302 | 7.5 | Jul 14 | .NET Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.8983 & 3.0.30729.8978 |
| CVE-2026-50653 | 7.5 | Jul 14 | Azure Active Directory Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.9182 & 3.0.30729.9168 |
| CVE-2026-50652 | 7.5 | Jul 14 | Azure Active Directory Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.9182 & 3.0.30729.9168 |
| CVE-2026-23666 | 7.5 | Apr 14 | .NET Framework Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.8982 & 3.0.30729.8976 |
| CVE-2026-33116 | 7.5 | Apr 14 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.8982 & 3.0.30729.8976 |
| CVE-2026-96222 | 7.4 | Oct 13 | Active Directory Federation Services (AD FS) Spoofing Vulnerability Affected: 3.5.0 before 2.0.50727.9188 AND 3.0.30729.9171 |
| CVE-2026-35433 | 7.3 | May 12 | .NET Elevation of Privilege Vulnerability Affected: 3.5.0 before 4.8.9334.0 and 4.8.4802.0 |
| CVE-2026-32177 | 7.3 | May 12 | .NET Elevation of Privilege Vulnerability Affected: 3.5.0 before 4.8.9334.0 and 4.8.4802.0 |
| CVE-2026-62897 | 7.0 | Aug 11 | .NET Framework Remote Code Execution Vulnerability Affected: 3.5.0 before 2.0.50727.9183 & 3.0.30729.9169 |
| CVE-2026-50659 | 6.5 | Jul 14 | .NET Spoofing Vulnerability Affected: 3.5.0 before 2.0.50727.8983 & 3.0.30729.8978 |
| CVE-2026-32226 | 5.9 | Apr 14 | .NET Framework Denial of Service Vulnerability Affected: 3.5.0 before 2.0.50727.8982 & 3.0.30729.8976 |
| CVE-2019-0657 | 5.9 | Mar 5 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability' Affected: Windows Server 2012; Windows Server 2012 (Server Core installation); Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation); +19 more |
Showing 42