Microsoft .Net vulnerabilities
128 vulnerabilities
Known vulnerabilities in Microsoft .Net, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-96960chainguardaspnet-9-targeting-pack+38
EPSS score1.03%
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-96959chainguardaspnet-9-targeting-pack+38EPSS score0.75%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-96958chainguardaspnet-9-targeting-pack+38EPSS score1.03%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-96957ubuntudotnet10+9EPSS score0.45%
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-96222chainguarddotnet-8-sdk+36EPSS score0.57%
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.CVE-2021-1721microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+133EPSS score3.34%
.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2021-41355microsoftmicrosoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)+39EPSS score20.34%
.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2021-26423microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+38EPSS score3.90%
.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2021-26701fedoraprojectfedora+91EPSS score30.10%
.NET Core Remote Code Execution VulnerabilityCVE-2021-31204fedoraprojectfedora+67EPSS score1.19%
.NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2021-31957fedoraprojectfedora+69EPSS score5.14%
ASP.NET Core Denial of Service VulnerabilityCVE-2021-24112microsoftmono+9EPSS score3.45%
.NET Core Remote Code Execution VulnerabilityCVE-2021-34485microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+56EPSS score2.07%
.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2025-21173chainguarddotnet-bootstrap-9+12EPSS score1.24%
.NET Elevation of Privilege VulnerabilityCVE-2025-21176chainguarddotnet-bootstrap-9+36EPSS score2.35%
.NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityCVE-2025-21171chainguarddotnet-bootstrap-9+23EPSS score1.70%
.NET Remote Code Execution VulnerabilityCVE-2025-21172chainguarddotnet-bootstrap-9+29EPSS score1.81%
.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2025-55248chainguarddotnet-bootstrap-8+37EPSS score0.72%
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.CVE-2025-55247ubuntudotnet10+10EPSS score0.61%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2025-26646chainguarddotnet-8+66EPSS score1.27%
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.