N5
Product
.NET 5.0
On CISA KEVExploited in the wild
129
CVEs
2
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 4High 100Medium 25Low 0
Watch
Add .NET 5.0 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21319 | 6.8 | Jan 9 | Microsoft Identity Denial of service vulnerability Affected: 6.0.0 before 6.0.26; 7.0.0 before 7.0.15; 8.0.0 before 8.0.1 |
| CVE-2026-58649 | 6.5 | Sep 8 | .NET Information Disclosure Vulnerability Affected: 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.0; +1 more |
| CVE-2026-62902 | 6.5 | Aug 11 | .NET Information Disclosure Vulnerability Affected: 8.0.0 before 8.0.30; 9.0.0 before 9.0.19 |
| CVE-2026-50659 | 6.5 | Jul 14 | .NET Spoofing Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2024-38167 | 6.5 | Aug 13 | .NET and Visual Studio Information Disclosure Vulnerability Affected: 8.0.0 before 8.0.8 |
| CVE-2023-36799 | 6.5 | Sep 12 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 6.0.0; 7.0.0 |
| CVE-2023-32032 | 6.5 | Jun 14 | .NET and Visual Studio Elevation of Privilege Vulnerability Affected: 7.0.0 before 7.0.7 |
| CVE-2021-1721 | 6.5 | Feb 25 | .NET Core and Visual Studio Denial of Service Vulnerability Affected: 5.0 through 5.0.2 |
| CVE-2020-8927 | 6.5 | Sep 15 | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger… Affected: 5.0 through 5.0.14 |
| CVE-2024-30045 | 6.3 | May 14 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 7.0.0 before 7.0.19; 8.0.0 before 8.0.5 |
| CVE-2022-24512 | 6.3 | Mar 9 | .NET and Visual Studio Remote Code Execution Vulnerability Affected: 5.0; 6.0.0 |
| CVE-2026-69304 | 5.9 | Sep 8 | ASP.NET Core Denial of Service Vulnerability Affected: 8.0.0 before 8.0.31; 9.0.0 before 9.0.20; 10.0.0 before 10.0.12 |
| CVE-2026-62900 | 5.9 | Aug 11 | .NET Information Disclosure Vulnerability Affected: 8.0.0 before 8.0.30; 9.0.0 before 9.0.19; 10.0.0 before 10.0.11 |
| CVE-2026-62899 | 5.9 | Aug 11 | .NET Security Feature Bypass Vulnerability Affected: 8.0.0 before 8.0.30; 9.0.0 before 9.0.19; 10.0.0 before 10.0.11 |
| CVE-2024-30046 | 5.9 | May 14 | Visual Studio Denial of Service Vulnerability Affected: 7.0.0 before 7.0.19; 8.0.0 before 8.0.5 |
| CVE-2022-34716 | 5.9 | Aug 9 | .NET Spoofing Vulnerability Affected: 6.0.0 before 6.0.8 |
| CVE-2021-31957 | 5.9 | Jun 8 | ASP.NET Core Denial of Service Vulnerability Affected: 5.0.0 before 5.0.7 |
| CVE-2025-55248 | 5.7 | Oct 14 | Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network Affected: 8.0.0 before 8.0.21; 9.0.0 before 9.0.10 |
| CVE-2021-41355 | 5.7 | Oct 13 | .NET Core and Visual Studio Information Disclosure Vulnerability Affected: 5.0 |
| CVE-2026-50526 | 5.5 | Jul 14 | .NET Tampering Vulnerability Affected: 8.0.0 before 8.0.29; 9.0.0 before 9.0.18; 10.0.0 before 10.0.6 |
| CVE-2026-45491 | 5.5 | Jun 9 | .NET Tampering Vulnerability Affected: 8.0.0 before 8.0.28; 9.0.0 before 9.0.17; 10.0.0 before 10.0.9; 8.0.0 before 8.0.28 |
| CVE-2023-36558 | 5.5 | Nov 14 | ASP.NET Core Security Feature Bypass Vulnerability Affected: 6.0.0 before 6.0.25; 7.0.0 before 7.0.14; 8.0.0; 8.0.0 |
| CVE-2022-30184 | 5.5 | Jun 15 | .NET and Visual Studio Information Disclosure Vulnerability Affected: 6.0.0 |
| CVE-2021-34485 | 5.0 | Aug 12 | .NET Core and Visual Studio Information Disclosure Vulnerability Affected: 5.0 through 5.0.8 |
| CVE-2026-32175 | 4.3 | May 12 | .NET Core Tampering Vulnerability Affected: 8.0.0 before 8.0.27; 9.0.0 before 9.0.16 |
Showing 25