Microsoft .NET Framework 3.5 vulnerabilities, page 3
77 vulnerabilities
Known vulnerabilities in Microsoft .NET Framework 3.5, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-0980microsoftmicrosoft .net framework 2.0+48
EPSS score4.94%
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.CVE-2019-0864microsoftmicrosoft .net framework 2.0+46EPSS score1.35%
A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'.CVE-2019-0981microsoftmicrosoft .net framework 2.0+48EPSS score4.94%
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.CVE-2026-65810microsoftmicrosoft .net framework 3.5+8EPSS score0.40%
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.CVE-2026-62886ubuntudotnet7+19EPSS score0.47%
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-62897ubuntudotnet7+16EPSS score0.37%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.CVE-2026-62872microsoftmicrosoft .net framework 3.5+8EPSS score0.78%
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.CVE-2026-47304chainguardaspnet-8-targeting-pack+42EPSS score0.29%
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-47302chainguardaspnet-8-targeting-pack+48EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-70354ubuntudotnet7+20EPSS score0.36%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.CVE-2026-32226microsoftmicrosoft .net framework 3.5+8EPSS score0.66%
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-32177ubuntudotnet7+16EPSS score0.57%
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-50652microsoftazure_active_directory+8EPSS score1.73%
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.CVE-2026-50648chainguardaspnet-8-targeting-pack+36EPSS score1.17%
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50650ubuntudotnet7+16EPSS score0.46%
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.CVE-2026-50653microsoftazure_active_directory+8EPSS score1.17%
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.CVE-2026-50646ubuntudotnet7+18EPSS score4.02%
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.CVE-2026-50527chainguarddotnet-bootstrap-8+26EPSS score1.17%
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50659chainguarddotnet-bootstrap-8+36EPSS score0.74%
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.CVE-2026-50649ubuntudotnet7+13EPSS score4.02%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.