Microsoft .NET Framework 3.5.1 vulnerabilities | LiveThreat CVE Feed

Product

Microsoft .NET Framework 3.5.1

by Microsoft · last CVE Oct 14, 2025

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 1High 3Medium 2Low 0

Severity

All severities6 Critical1 High3 Medium2 Low0

Exploitation

On CISA KEV3 Exploited in the wild3

Watch

Add Microsoft .NET Framework 3.5.1 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-0646 In wildKEV	9.8	99%	Jan 14	Microsoft .NET Framework Remote Code Execution Vulnerability Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
CVE-2020-1147 In wildKEV	7.8	94%	Jul 14	Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1
CVE-2024-29059 In wildKEV	7.5	99%	Mar 22	.NET Framework Information Disclosure Vulnerability Affected: 3.5.0 before 3.0.30729.8959
CVE-2019-0613	8.8	15%	Mar 5	A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully… Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1
CVE-2019-0657	5.9	5%	Mar 5	A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability' Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1
CVE-2025-55248	5.7	1%	Oct 14	.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability Affected: 3.5.0 before 2.0.50727.8981