Login Request a demo
MN
Product
Microsoft .NET Framework 3.5
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
42
CVEs
3
On KEV
9.8
Max CVSS
16
New 30D
Vulnerabilities42In the news0Timeline
Severity mix
Critical 2High 37Medium 3Low 0
Severity
All severities42Critical2High37Medium3Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Microsoft .NET Framework 3.5 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50659
6.5
1%
Jul 14
.NET Spoofing Vulnerability
Affected: 3.5.0 before 2.0.50727.8983 & 3.0.30729.8978
CVE-2026-32226
5.9
1%
Apr 14
.NET Framework Denial of Service Vulnerability
Affected: 3.5.0 before 2.0.50727.8982 & 3.0.30729.8976
CVE-2019-0657
5.9
5%
Mar 5
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'
Affected: Windows Server 2012; Windows Server 2012 (Server Core installation); Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation); +19 more
Showing 3