NC
Product
.NET Core 3.1
On CISA KEVExploited in the wild
32
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 23Medium 9Low 0
Watch
Add .NET Core 3.1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1721 | 6.5 | Feb 25 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 2.1 through 2.1.24; 3.1 through 3.1.11 |
| CVE-2020-8927 | 6.5 | Sep 15 | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger… Affected: 3.1 through 3.1.22 |
| CVE-2022-24512 | 6.3 | Mar 9 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 3.1 |
| CVE-2022-34716 | 5.9 | Aug 9 | .NET Spoofing Vulnerability Affected: 3.1 before 3.1.28 |
| CVE-2021-31957 | 5.9 | Jun 8 | ASP.NET Core Denial of Service Vulnerability Affected: 3.1 before 3.1.16 |
| CVE-2019-0657 | 5.9 | Mar 5 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability' Affected: 1; 2.1; 2.2 |
| CVE-2022-30184 | 5.5 | Jun 15 | .NET and Visual Studio Information Disclosure Vulnerability Affected: 3.1 |
| CVE-2018-8356 | 5.5 | Jul 11 | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass… Affected: 1.0; 1.1; 2.0 |
| CVE-2021-34485 | 5.0 | Aug 12 | .NET Core and Visual Studio Information Disclosure Vulnerability Affected: 2.1 through 2.1.28; 3.1 through 3.1.17 |
Showing 9