Microsoft .NET Framework 3.5 AND 4.8 vulnerabilities
80 vulnerabilities
Known vulnerabilities in Microsoft .NET Framework 3.5 AND 4.8, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-97801microsoftmicrosoft .net framework 3.5+7
EPSS score0.61%
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.CVE-2026-97788microsoftmicrosoft .net framework 3.5+37EPSS score0.68%
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.CVE-2026-96960chainguardaspnet-9-targeting-pack+33EPSS score1.03%
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-96959chainguardaspnet-9-targeting-pack+33EPSS score0.75%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-96958chainguardaspnet-9-targeting-pack+33EPSS score1.03%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-96233chainguarddotnet-bootstrap-8+27EPSS score0.77%
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-96224microsoftmicrosoft .net framework 3.5+16EPSS score0.74%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-96222chainguarddotnet-8-sdk+26EPSS score0.58%
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.CVE-2026-85363microsoftmicrosoft .net framework 3.5+16EPSS score0.74%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.CVE-2026-84008chainguardactions-runner+35EPSS score0.77%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-83520microsoftmicrosoft .net framework 3.5+16EPSS score1.27%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70174microsoftmicrosoft .net framework 3.5+16EPSS score0.80%
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70035microsoftmicrosoft .net framework 3.5+16EPSS score1.27%
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.CVE-2026-70007microsoftmicrosoft .net framework 3.5+16EPSS score0.64%
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.CVE-2026-69651chainguarddotnet-bootstrap-8+28EPSS score1.10%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-58280chainguarddotnet-bootstrap-8+29EPSS score1.10%
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-108398microsoftmicrosoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2+6EPSS score0.47%
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.CVE-2026-102869microsoftmicrosoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2+8EPSS score0.74%
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.CVE-2025-21176chainguarddotnet-bootstrap-9+36EPSS score2.35%
.NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityCVE-2025-55248chainguarddotnet-bootstrap-8+37EPSS score0.72%
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.