NF
Product
.NET Framework
On CISA KEVExploited in the wild
207
CVEs
5
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 7High 91Medium 15Low 1
Watch
Add .NET Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-0646 In wildKEV | 9.8 | Jan 14 | Microsoft .NET Framework Remote Code Execution Vulnerability Affected: 3.0; 3.5; 3.5; 4.6.2; 4.7; 4.7.1; +22 more |
| CVE-2026-47304 | 9.8 | Jul 14 | .NET Security Feature Bypass Vulnerability Affected: 4.8.1; 4.8; 4.6.2; 4.7; 4.7.1; 4.7.2; +7 more |
| CVE-2024-0057 | 9.8 | Jan 9 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability Affected: 4.8 before 4.8.04690.02; 4.8 before 4.8.04690.01; 4.6.2; 4.7; 4.7.1; 4.7.2; +8 more |
| CVE-2023-36049 | 9.8 | Nov 14 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability Affected: 2.0; 3.0; 3.5; 3.5; 4.6.2; 4.7; +15 more |
| CVE-2018-8540 | 9.8 | Dec 12 | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This… Affected: 3.5; 3.5; 3.5.1; 4.5.2; 4.6.2; 4.6; +4 more |
| CVE-2018-8421 | 9.8 | Sep 13 | A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execution Vulnerability." This affects… Affected: 2.0; 3.0; 3.5; 3.5.1; 4.5.2; 4.5.2; +17 more |
| CVE-2016-0132 | 9.8 | Mar 9 | Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote… Affected: 2.0; 3.0; 3.5; 3.5.1; 4.5.2; 4.6; +1 more |
Showing 7