Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 vulnerabilities
81 vulnerabilities
Known vulnerabilities in Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-97801microsoftmicrosoft .net framework 3.5+7
EPSS score0.61%
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.CVE-2026-97788microsoftmicrosoft .net framework 3.5+37EPSS score0.68%
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.CVE-2026-96960chainguardaspnet-9-targeting-pack+33EPSS score1.03%
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-96959chainguardaspnet-9-targeting-pack+33EPSS score0.75%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-96958chainguardaspnet-9-targeting-pack+33EPSS score1.03%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-96233chainguarddotnet-bootstrap-8+27EPSS score0.77%
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-96224microsoftmicrosoft .net framework 3.5+16EPSS score0.74%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-96222chainguarddotnet-8-sdk+26EPSS score0.58%
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.CVE-2026-85363microsoftmicrosoft .net framework 3.5+16EPSS score0.74%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.CVE-2026-84008chainguardactions-runner+35EPSS score0.77%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-83520microsoftmicrosoft .net framework 3.5+16EPSS score1.27%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70174microsoftmicrosoft .net framework 3.5+16EPSS score0.80%
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70035microsoftmicrosoft .net framework 3.5+16EPSS score1.27%
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.CVE-2026-70007microsoftmicrosoft .net framework 3.5+16EPSS score0.64%
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.CVE-2026-69651chainguarddotnet-bootstrap-8+28EPSS score1.10%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-58280chainguarddotnet-bootstrap-8+29EPSS score1.10%
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-108398microsoftmicrosoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2+6EPSS score0.47%
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.CVE-2026-102869microsoftmicrosoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2+8EPSS score0.74%
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.CVE-2021-24111microsoftmicrosoft .net framework 4.6+5EPSS score3.84%
.NET Framework Denial of Service VulnerabilityCVE-2025-21176chainguarddotnet-bootstrap-9+36EPSS score2.35%
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability