NC
Product
.NET Core 3.1
On CISA KEVExploited in the wild
32
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 23Medium 9Low 0
Watch
Add .NET Core 3.1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1147 In wildKEV | 7.8 | Jul 14 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Affected: 2.1; 3.1 |
| CVE-2020-0606 | 8.8 | Jan 14 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability… Affected: 3.0; 3.1 |
| CVE-2020-0605 | 8.8 | Jan 14 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability… Affected: 1.0; 3.0; 3.1 |
| CVE-2021-26701 | 8.1 | Feb 25 | .NET Core Remote Code Execution Vulnerability Affected: 2.1 before 2.1.28; 3.1 before 3.1.15 |
| CVE-2021-24112 | 8.1 | Feb 25 | .NET Core Remote Code Execution Vulnerability Affected: 2.1 before publication |
| CVE-2022-41032 | 7.8 | Oct 11 | NuGet Client Elevation of Privilege Vulnerability Affected: 3.1 |
| CVE-2022-38013 | 7.5 | Sep 13 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 3.1 |
| CVE-2022-29145 | 7.5 | May 10 | .NET and Visual Studio Denial of Service Vulnerability Affected: 3.1 |
| CVE-2022-29117 | 7.5 | May 10 | .NET and Visual Studio Denial of Service Vulnerability Affected: 3.1 |
| CVE-2022-23267 | 7.5 | May 10 | .NET and Visual Studio Denial of Service Vulnerability Affected: 3.1 |
| CVE-2022-24464 | 7.5 | Mar 9 | .NET and Visual Studio Denial of Service Vulnerability Affected: 3.1 through 3.1.22 |
| CVE-2021-26423 | 7.5 | Aug 12 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 2.1 through 2.1.28; 3.1 through 3.1.17 |
| CVE-2020-1108 | 7.5 | May 21 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests Affected: 2.1 through 2.1.18; 3.0 through 3.1.4; 2.1; 3.1 |
| CVE-2019-1301 | 7.5 | Sep 11 | A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability' Affected: 2.1; 2.2 |
| CVE-2019-0981 | 7.5 | May 16 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability' Affected: 1.0; 1.1; 2.1; 2.2 |
| CVE-2019-0980 | 7.5 | May 16 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability' Affected: 1.0; 1.1; 2.1; 2.2 |
| CVE-2019-0820 | 7.5 | May 16 | A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability' Affected: 1.0; 1.1; 2.1; 2.2 |
| CVE-2019-0545 | 7.5 | Jan 8 | An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework… Affected: 2.1; 2.2 |
| CVE-2018-8409 | 7.5 | Sep 13 | A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1,… Affected: 2.1 before 2.1.4 |
| CVE-2018-0765 | 7.5 | May 9 | A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft… Affected: 2.0 |
| CVE-2018-0786 | 7.5 | Jan 10 | Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass… Affected: 1.0; 2.0 |
| CVE-2018-0764 | 7.5 | Jan 10 | Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0 Affected: 1.0; 1.1; 2.0 |
| CVE-2021-31204 | 7.3 | May 11 | .NET and Visual Studio Elevation of Privilege Vulnerability Affected: 3.1 before 3.1.15-servicing.21214.3 |
Showing 23