Microsoft .NET Framework 3.5 AND 4.8.1 vulnerabilities, page 3
75 vulnerabilities
Known vulnerabilities in Microsoft .NET Framework 3.5 AND 4.8.1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-50355microsoftmicrosoft .net framework 3.5 and 4.7.2+21
EPSS score1.17%
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.CVE-2026-50411microsoftmicrosoft .net framework 3.5 and 4.7.2+31EPSS score1.17%
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.CVE-2026-50368microsoftmicrosoft .net framework 3.5 and 4.7.2+21EPSS score1.17%
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.CVE-2026-50648chainguardaspnet-8-targeting-pack+36EPSS score1.17%
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50650ubuntudotnet7+16EPSS score0.46%
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.CVE-2026-50647microsoftmicrosoft .net framework 3.5 and 4.7.2+31EPSS score1.17%
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.CVE-2026-50324microsoftmicrosoft .net framework 3.5 and 4.7.2+19EPSS score0.85%
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.CVE-2026-50304microsoftmicrosoft .net framework 3.5 and 4.7.2+20EPSS score1.17%
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.CVE-2026-50653microsoftazure_active_directory+8EPSS score1.17%
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.CVE-2026-50646ubuntudotnet7+18EPSS score4.02%
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.CVE-2026-50527chainguarddotnet-bootstrap-8+26EPSS score1.17%
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50659chainguarddotnet-bootstrap-8+36EPSS score0.74%
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.CVE-2026-50649ubuntudotnet7+13EPSS score4.02%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.CVE-2026-50525chainguardaspnet-8-targeting-pack+37EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-35433ubuntudotnet7+13EPSS score0.57%
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-33116chainguarddotnet-10-sdk+36EPSS score2.44%
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.CVE-2026-23666microsoftmicrosoft .net framework 3.5+6EPSS score1.33%
Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2023-21722microsoftmicrosoft .net framework 2.0 service pack 2+11EPSS score0.92%
.NET Framework Denial of Service VulnerabilityCVE-2023-21808microsoftmicrosoft .net framework 3.5 and 4.6.2+25EPSS score1.15%
.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2023-36560microsoftmicrosoft .net framework 2.0 service pack 2+12EPSS score2.91%
ASP.NET Security Feature Bypass Vulnerability