Microsoft .NET Framework 3.5 AND 4.8.1 vulnerabilities, page 2
75 vulnerabilities
Known vulnerabilities in Microsoft .NET Framework 3.5 AND 4.8.1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-41089microsoftmicrosoft .net framework 2.0 service pack 2+23
EPSS score1.19%
.NET Framework Remote Code Execution VulnerabilityCVE-2022-26929microsoftmicrosoft .net framework 3.5 and 4.6/4.6.2+3EPSS score1.57%
.NET Framework Remote Code Execution VulnerabilityCVE-2024-21312microsoftmicrosoft .net framework 3.5+6EPSS score3.58%
.NET Framework Denial of Service VulnerabilityCVE-2024-21409microsoftmicrosoft .net framework 3.5 and 4.7.2+22EPSS score2.51%
.NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityCVE-2024-0057ubuntudotnet6+29EPSS score2.78%
NET, .NET Framework, and Visual Studio Security Feature Bypass VulnerabilityCVE-2024-0056microsoftmicrosoft .net framework 2.0 service pack 2+22EPSS score1.18%
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass VulnerabilityCVE-2024-43483ubuntudotnet6+27EPSS score2.90%
.NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityCVE-2024-43484ubuntudotnet6+25EPSS score2.96%
.NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityCVE-2024-29059microsoftmicrosoft .net framework 2.0 service pack 2+11KEVEPSS score98.62%
.NET Framework Information Disclosure VulnerabilityCVE-2024-38081ubuntudotnet7+19EPSS score1.30%
.NET, .NET Framework, and Visual Studio Elevation of Privilege VulnerabilityCVE-2026-65810microsoftmicrosoft .net framework 3.5+8EPSS score0.40%
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.CVE-2026-62886ubuntudotnet7+19EPSS score0.47%
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-62872microsoftmicrosoft .net framework 3.5+8EPSS score0.78%
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.CVE-2026-47304chainguardaspnet-8-targeting-pack+42EPSS score0.29%
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-47302chainguardaspnet-8-targeting-pack+48EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-69522ubuntudotnet7+14EPSS score0.91%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2026-70354ubuntudotnet7+20EPSS score0.36%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.CVE-2026-32226microsoftmicrosoft .net framework 3.5+8EPSS score0.66%
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-32177ubuntudotnet7+16EPSS score0.57%
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-50652microsoftazure_active_directory+8EPSS score1.73%
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.