Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 vulnerabilities, page 2
45 vulnerabilities
Known vulnerabilities in Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-1108microsoftmicrosoft .net framework 2.0 service pack 2+88
EPSS score6.46%
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application.
The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.CVE-2020-1476microsoftmicrosoft .net framework 2.0 service pack 2+12EPSS score1.13%
An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow access to cached files. An attacker who successfully exploited this vulnerability could gain access to restricted files.
To exploit this vulnerability, an attacker would need to send a specially crafted request to an affected server.
The update addresses the vulnerability by changing how ASP.NET and .NET handle requests.CVE-2022-21911microsoftmicrosoft .net framework 2.0 service pack 2+10EPSS score3.05%
.NET Framework Denial of Service VulnerabilityCVE-2022-41064microsoftmicrosoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2+12EPSS score0.84%
.NET Framework Information Disclosure VulnerabilityCVE-2022-26832microsoftmicrosoft .net framework 2.0 service pack 2+11EPSS score3.61%
.NET Framework Denial of Service VulnerabilityCVE-2026-65810microsoftmicrosoft .net framework 3.5+8EPSS score0.40%
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.CVE-2026-62886ubuntudotnet7+15EPSS score0.47%
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-62872microsoftmicrosoft .net framework 3.5+8EPSS score0.78%
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.CVE-2026-69522ubuntudotnet7+14EPSS score0.91%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2026-70354ubuntudotnet7+20EPSS score0.36%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.CVE-2023-36560microsoftmicrosoft .net framework 2.0 service pack 2+12EPSS score2.91%
ASP.NET Security Feature Bypass VulnerabilityCVE-2023-36796microsoftmicrosoft .net framework 2.0 service pack 2+30EPSS score1.23%
Visual Studio Remote Code Execution VulnerabilityCVE-2023-36899microsoftmicrosoft .net framework 2.0 service pack 2+9EPSS score76.71%
ASP.NET Elevation of Privilege VulnerabilityCVE-2023-36788microsoftmicrosoft .net framework 2.0 service pack 2+9EPSS score1.02%
.NET Framework Remote Code Execution VulnerabilityCVE-2023-36873microsoftmicrosoft .net framework 3.5 and 4.6.2+8EPSS score1.50%
.NET Framework Spoofing VulnerabilityCVE-2023-36792microsoftmicrosoft .net framework 2.0 service pack 2+28EPSS score1.23%
Visual Studio Remote Code Execution VulnerabilityCVE-2023-36793microsoftmicrosoft .net framework 2.0 service pack 2+28EPSS score1.23%
Visual Studio Remote Code Execution VulnerabilityCVE-2023-36794microsoftmicrosoft .net framework 2.0 service pack 2+28EPSS score1.23%
Visual Studio Remote Code Execution VulnerabilityCVE-2023-36049ubuntudotnet6+24EPSS score6.79%
.NET, .NET Framework, and Visual Studio Elevation of Privilege VulnerabilityCVE-2023-29326microsoftmicrosoft .net framework 2.0 service pack 2+9EPSS score0.90%
.NET Framework Remote Code Execution Vulnerability