Microsoft .NET Framework 4.8.1 vulnerabilities, page 2

39 vulnerabilities

Known vulnerabilities in Microsoft .NET Framework 4.8.1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2026-65810microsoftmicrosoft .net framework 3.5+8
EPSS score
0.40%
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.
7.8CVE-2026-62886ubuntudotnet7+19
EPSS score
0.47%
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
7CVE-2026-62897ubuntudotnet7+16
EPSS score
0.37%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
8.8CVE-2026-62872microsoftmicrosoft .net framework 3.5+8
EPSS score
0.78%
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
9.8CVE-2026-47304chainguardaspnet-8-targeting-pack+42
EPSS score
0.29%
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
8.8CVE-2026-69522ubuntudotnet7+14
EPSS score
0.91%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
7.8CVE-2026-70354ubuntudotnet7+20
EPSS score
0.36%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
5.9CVE-2026-32226microsoftmicrosoft .net framework 3.5+8
EPSS score
0.66%
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
7.5CVE-2026-50652microsoftazure_active_directory+8
EPSS score
1.73%
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
7.5CVE-2026-50355microsoftmicrosoft .net framework 3.5 and 4.7.2+21
EPSS score
1.17%
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
7.5CVE-2026-50411microsoftmicrosoft .net framework 3.5 and 4.7.2+31
EPSS score
1.17%
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
7.5CVE-2026-50368microsoftmicrosoft .net framework 3.5 and 4.7.2+21
EPSS score
1.17%
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
7.5CVE-2026-50647microsoftmicrosoft .net framework 3.5 and 4.7.2+31
EPSS score
1.17%
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
5.9CVE-2026-50324microsoftmicrosoft .net framework 3.5 and 4.7.2+19
EPSS score
0.85%
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
7.5CVE-2026-50304microsoftmicrosoft .net framework 3.5 and 4.7.2+20
EPSS score
1.17%
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
7.5CVE-2026-50653microsoftazure_active_directory+8
EPSS score
1.17%
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
6.5CVE-2026-50659chainguarddotnet-bootstrap-8+36
EPSS score
0.74%
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
7.8CVE-2026-50649ubuntudotnet7+13
EPSS score
4.02%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
7.5CVE-2026-50525chainguardaspnet-8-targeting-pack+37
EPSS score
1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.