.NET 5.0 vulnerabilities | LiveThreat CVE Feed

Product

.NET 5.0

by Microsoft · last CVE Oct 22, 2026

On CISA KEVExploited in the wild

130

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities130 In the news8 Timeline

Severity mix

Critical 5High 100Medium 25Low 0

Severity

All severities130 Critical5 High100 Medium25 Low0

Exploitation

On CISA KEV3 Exploited in the wild3

Watch

Add .NET 5.0 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-50525	7.5	1%	Jul 14	.NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6
CVE-2026-50524	7.5	1%	Jul 14	.NET Framework Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6
CVE-2026-47302	7.5	1%	Jul 14	.NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6
CVE-2026-57108	7.5	1%	Jul 14	.NET Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6
CVE-2026-56170	7.5	1%	Jul 14	ASP.NET Core Denial of Service Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6
CVE-2026-45591	7.5	2%	Jun 9	ASP.NET Core Denial of Service Vulnerability Affected: 8.0.0 before 8.0.28; 9.0.0 before 9.0.17; 10.0.0 before 10.0.9
CVE-2026-42899	7.5	2%	May 12	ASP.NET Core Denial of Service Vulnerability Affected: 8.0.0 before 8.0.27; 9.0.0 before 9.0.16; 10.0.0 before 10.0.8
CVE-2026-32203	7.5	2%	Apr 14	.NET and Visual Studio Denial of Service Vulnerability Affected: 10.0.0 before 10.0.6; 8.0.0 before 8.0.26; 9.0.0 before 9.0.15
CVE-2026-26171	7.5	2%	Apr 14	.NET Denial of Service Vulnerability Affected: 10.0.0 before 10.0.6; 8.0.0 before 8.0.26; 9.0.0 before 9.0.15
CVE-2026-33116	7.5	2%	Apr 14	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 10.0.0 before 10.0.6; 8.0.0 before 8.0.26; 9.0.0 before 9.0.15
CVE-2026-32178	7.5	2%	Apr 14	.NET Spoofing Vulnerability Affected: 10.0.0 before 10.0.6; 8.0.0 before 8.0.26; 9.0.0 before 9.0.15
CVE-2026-25667	7.5	3%	Mar 19	ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet,… Affected: 8.0.0 before 8.0.22; 9.0.0 before 9.0.11
CVE-2026-26127	7.5	2%	Mar 10	.NET Denial of Service Vulnerability Affected: 10.0.0 before 10.0.4; 9.0.0 before 9.0.14
CVE-2026-21218	7.5	1%	Feb 10	.NET Spoofing Vulnerability Affected: 8.0.0 before 8.0.24; 9.0.0 before 9.0.13; 10.0.0 before 10.0.3
CVE-2025-30399	7.5	1%	Jun 13	Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network Affected: 9.0.0 before 9.0.6; 8.0.0 before 8.0.17
CVE-2025-21172	7.5	2%	Jan 14	.NET and Visual Studio Remote Code Execution Vulnerability Affected: 8.0.0; 9.0.0
CVE-2025-21171	7.5	2%	Jan 14	.NET Remote Code Execution Vulnerability Affected: 9.0.0
CVE-2024-43499	7.5	3%	Nov 12	.NET and Visual Studio Denial of Service Vulnerability Affected: 9.0.0
CVE-2024-43485	7.5	3%	Oct 8	.NET and Visual Studio Denial of Service Vulnerability Affected: 6.0.0 before 6.0.35; 8.0.0 before 8.0.10
CVE-2024-43484	7.5	3%	Oct 8	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 6.0.0 before 6.0.35; 8.0.0 before 8.0.10
CVE-2024-43483	7.5	3%	Oct 8	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 6.0.0 before 6.0.35; 8.0.0 before 8.0.10
CVE-2024-38168	7.5	3%	Aug 13	.NET and Visual Studio Denial of Service Vulnerability Affected: 8.0.0 before 8.0.8
CVE-2024-38095	7.5	3%	Jul 9	.NET and Visual Studio Denial of Service Vulnerability Affected: 8.0.0 before 8.0.7
CVE-2024-30105	7.5	3%	Jul 9	.NET and Visual Studio Denial of Service Vulnerability Affected: 8.0.0 through 8.0.7
CVE-2024-26190	7.5	3%	Mar 12	Microsoft QUIC Denial of Service Vulnerability Affected: 7.0.0 before 7.0.17; 8.0.0 before 8.0.3
CVE-2024-21392	7.5	3%	Mar 12	.NET and Visual Studio Denial of Service Vulnerability Affected: 7.0.0 before 7.0.17; 8.0.0 before 8.0.3
CVE-2024-20672	7.5	3%	Jan 9	.NET Denial of Service Vulnerability Affected: 6.0.0 before 6.0.26; 7.0.0 before 7.0.15
CVE-2023-38171	7.5	71%	Oct 10	Microsoft QUIC Denial of Service Vulnerability Affected: 7.0.0 before 7.0.12
CVE-2023-36435	7.5	6%	Oct 10	Microsoft QUIC Denial of Service Vulnerability Affected: 7.0.0 through 7.0.12
CVE-2023-35391	7.5	2%	Aug 8	ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability Affected: 6.0.0 before 6.0.21; 7.0.0 before 7.0.10
CVE-2023-38178	7.5	3%	Aug 8	.NET Core and Visual Studio Denial of Service Vulnerability Affected: 6.0.0
CVE-2023-29331	7.5	3%	Jun 14	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 6.0.0; 7.0.0
CVE-2023-24936	7.5	2%	Jun 14	.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability Affected: 6.0.0; 7.0.0
CVE-2023-21538	7.5	3%	Jan 10	.NET Denial of Service Vulnerability Affected: 6.0.0
CVE-2022-38013	7.5	4%	Sep 13	.NET Core and Visual Studio Denial of Service Vulnerability Affected: 6.0.0
CVE-2022-29145	7.5	6%	May 10	.NET and Visual Studio Denial of Service Vulnerability Affected: 5.0; 6.0.0
CVE-2022-29117	7.5	6%	May 10	.NET and Visual Studio Denial of Service Vulnerability Affected: 5.0; 6.0.0
CVE-2022-23267	7.5	6%	May 10	.NET and Visual Studio Denial of Service Vulnerability Affected: 5.0; 6.0.0
CVE-2022-24464	7.5	4%	Mar 9	.NET and Visual Studio Denial of Service Vulnerability Affected: 5.0 through 5.0.14; 6.0.0 through 6.0.2
CVE-2022-21986	7.5	4%	Feb 9	.NET Denial of Service Vulnerability Affected: 5.0 before 5.0.14; 6.0.0 before 6.0.2
CVE-2021-26423	7.5	4%	Aug 12	.NET Core and Visual Studio Denial of Service Vulnerability Affected: 5.0 through 5.0.8
CVE-2020-1108	7.5	6%	May 21	A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests Affected: 5.0; 5.0; 5.0
CVE-2026-96222	7.4	1%	Oct 13	Active Directory Federation Services (AD FS) Spoofing Vulnerability Affected: 8.0.0 before 8.0.5
CVE-2026-35433	7.3	1%	May 12	.NET Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.27; 9.0.0 before 9.0.16; 10.0.0 before 10.0.8
CVE-2026-32177	7.3	1%	May 12	.NET Elevation of Privilege Vulnerability Affected: 8.0.0 before 8.0.27; 9.0.0 before 9.0.16; 10.0.0 before 10.0.8
CVE-2025-55247	7.3	1%	Oct 14	Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally Affected: 8.0.0 before 8.0.21; 9.0.0 before 9.0.10
CVE-2025-21173	7.3	1%	Jan 14	.NET Elevation of Privilege Vulnerability Affected: 8.0.0; 9.0.0
CVE-2024-38081	7.3	1%	Jul 9	.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability Affected: 6.0.0 before 6.0.32
CVE-2024-21409	7.3	3%	Apr 9	.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 6.0.0 before 6.0.29; 7.0.0 before 7.0.18; 8.0.0 before 8.0.4
CVE-2023-33135	7.3	1%	Jun 14	.NET and Visual Studio Elevation of Privilege Vulnerability Affected: 6.0.0 before 6.0.18; 7.0.0 before 7.0.7