Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 vulnerabilities

Product

Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

by Microsoft · last CVE Oct 13, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 2High 42Medium 4Low 0

Severity

Exploitation

Watch

Add Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-50659	6.5	1%	Jul 14	.NET Spoofing Vulnerability Affected: 4.7.0 before 4.7.4143.0
CVE-2026-50324	5.9	1%	Jul 14	Windows Active Directory Federation Services Denial of Service Vulnerability Affected: 4.7.0 before 4.7.4143.0
CVE-2026-32226	5.9	1%	Apr 14	.NET Framework Denial of Service Vulnerability Affected: 4.7.0 before 4.8.4801.0
CVE-2019-0657	5.9	5%	Mar 5	A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability' Affected: Windows Server 2016; Windows 10 Version 1607 for 32-bit Systems; Windows 10 Version 1607 for x64-based Systems; Windows Server 2016 (Server Core installation)