N5
Product
.NET 5.0
On CISA KEVExploited in the wild
129
CVEs
2
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 4High 100Medium 25Low 0
Watch
Add .NET 5.0 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44487 In wildKEV | 7.5 | Oct 10 | HTTP/2 Rapid Reset Attack Vulnerability Affected: 6.0.0 before 6.0.23; 7.0.0 before 7.0.12 |
| CVE-2023-38180 In wildKEV | 7.5 | Aug 8 | .NET and Visual Studio Denial of Service Vulnerability Affected: 6.0.0 before 6.0.21; 7.0.0 before 7.0.10 |
| CVE-2026-96957 | 8.8 | Oct 13 | .NET Security Feature Bypass Vulnerability Affected: 10.0.0 before 10.0.13; 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.0; +3 more |
| CVE-2026-71328 | 8.8 | Sep 8 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 8.0.0 before 8.0.31; 9.0.0 before 9.0.20; 10.0.0 before 10.0.12; 11.0.0; 11.0.0; 11.0.0; +4 more |
| CVE-2026-69439 | 8.8 | Sep 8 | .NET and Visual Studio Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.31; 9.0.0 before 9.0.20; 10.0.0 before 10.0.12; 11.0.0; 11.0.0; 11.0.0; +4 more |
| CVE-2026-47303 | 8.8 | Jul 14 | ASP.NET Core Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2026-47300 | 8.8 | Jul 14 | ASP.NET Core Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2025-21176 | 8.8 | Jan 14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 8.0.0; 9.0.0 |
| CVE-2024-0056 | 8.7 | Jan 9 | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability Affected: 6.0.0 before 6.0.26; 7.0.0 before 7.0.15; 8.0.0 |
| CVE-2026-50528 | 8.2 | Jul 14 | .NET Security Feature Bypass Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2024-38229 | 8.1 | Oct 8 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 8.0.0 before 8.0.10 |
| CVE-2024-35264 | 8.1 | Jul 9 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 8.0.0 before 8.0.7 |
| CVE-2023-33170 | 8.1 | Jul 11 | ASP.NET and Visual Studio Security Feature Bypass Vulnerability Affected: 6.0.0 before 6.0.20; 7.0.0 before 7.0.9 |
| CVE-2023-33127 | 8.1 | Jul 11 | .NET and Visual Studio Elevation of Privilege Vulnerability Affected: 6.0.0 before 6.0.20; 7.0.0 before 7.0.9 |
| CVE-2021-26701 | 8.1 | Feb 25 | .NET Core Remote Code Execution Vulnerability Affected: 5.0 before 5.0.4 |
| CVE-2021-24112 | 8.1 | Feb 25 | .NET Core Remote Code Execution Vulnerability Affected: 5.0.0 before publication |
| CVE-2025-26646 | 8.0 | May 13 | External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network Affected: 9.0.0 before 9.0.5; 8.0.0 before 8.0.16 |
| CVE-2026-70354 | 7.8 | Aug 11 | .NET Core Remote Code Execution Vulnerability Affected: 8.0.0 before 8.0.30; 9.0.0 before 9.0.19; 10.0.0 before 10.0.11 |
| CVE-2026-62886 | 7.8 | Aug 11 | .NET Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.30; 9.0.0 before 9.0.19; 10.0.0 before 10.0.11 |
| CVE-2026-62871 | 7.8 | Aug 11 | .NET Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.30; 9.0.0 before 9.0.19; 10.0.0 before 10.0.11 |
| CVE-2026-58641 | 7.8 | Aug 11 | .NET Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.30; 9.0.0 before 9.0.19; 8.0.0 before 8.0.30; 9.0.0 before 9.0.19; 10.0.0 before 10.0.11; 8.0.0 before 8.0.30; +2 more |
| CVE-2026-62909 | 7.8 | Aug 11 | .NET Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.30; 9.0.0 before 9.0.19; 10.0.0 before 10.0.11 |
| CVE-2026-50650 | 7.8 | Jul 14 | .NET Framework Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18 |
| CVE-2026-50649 | 7.8 | Jul 14 | .NET Remote Code Execution Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18 |
| CVE-2026-50646 | 7.8 | Jul 14 | .NET Framework Remote Code Execution Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18 |
| CVE-2026-45490 | 7.8 | Jun 9 | .NET SDK Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.28; 9.0.0 before 9.0.17; 10.0.0 before 10.0.9 |
| CVE-2026-26131 | 7.8 | Mar 10 | .NET Elevation of Privilege Vulnerability Affected: 10.0.0 before 10.0.4 |
| CVE-2023-36796 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 6.0.0; 7.0.0 |
| CVE-2023-36794 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 6.0.0; 7.0.0 |
| CVE-2023-36793 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 6.0.0; 7.0.0 |
| CVE-2023-36792 | 7.8 | Sep 12 | Visual Studio Remote Code Execution Vulnerability Affected: 6.0.0; 7.0.0 |
| CVE-2023-35390 | 7.8 | Aug 8 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 6.0.0 before 6.0.21; 7.0.0 before 7.0.10 |
| CVE-2023-24897 | 7.8 | Jun 14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 6.0.0; 7.0.0 |
| CVE-2023-24895 | 7.8 | Jun 14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 6.0.0; 7.0.0 |
| CVE-2023-28260 | 7.8 | Apr 11 | .NET DLL Hijacking Remote Code Execution Vulnerability Affected: 6.0.0 before 6.0.16; 7.0.0 before 7.0.5 |
| CVE-2023-21808 | 7.8 | Feb 14 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 6.0.0; 7.0.0 |
| CVE-2022-41032 | 7.8 | Oct 11 | NuGet Client Elevation of Privilege Vulnerability Affected: 6.0.0 |
| CVE-2026-96960 | 7.5 | Oct 13 | .NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.5; 9.0.0 before 9.0.21; 10.0.0 before 10.0.13; 11.0.0; 11.0.0; 11.0.0; +5 more |
| CVE-2026-96959 | 7.5 | Oct 13 | .NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.5; 9.0.0 before 9.0.21; 10.0.0 before 10.0.13; 11.0.0; 11.0.0; 11.0.0; +5 more |
| CVE-2026-96958 | 7.5 | Oct 13 | .NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.5; 9.0.0 before 9.0.21; 10.0.0 before 10.0.13; 11.0.0; 11.0.0; 11.0.0; +5 more |
| CVE-2026-62898 | 7.5 | Aug 11 | Microsoft QUIC Information Disclosure Vulnerability Affected: 8.0.0 before 8.0.30; 9.0.0 before 9.0.19; 10.0.0 before 10.0.11 |
| CVE-2026-62901 | 7.5 | Aug 11 | .NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.30; 9.0.0 before 9.0.19; 10.0.0 before 10.0.11 |
| CVE-2026-50651 | 7.5 | Jul 14 | .NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2026-50648 | 7.5 | Jul 14 | .NET Framework Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2026-50527 | 7.5 | Jul 14 | .NET Framework Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2026-50525 | 7.5 | Jul 14 | .NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2026-50524 | 7.5 | Jul 14 | .NET Framework Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2026-47302 | 7.5 | Jul 14 | .NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2026-57108 | 7.5 | Jul 14 | .NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2026-56170 | 7.5 | Jul 14 | ASP.NET Core Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |