Microsoft .Net vulnerabilities, page 2
129 vulnerabilities
Known vulnerabilities in Microsoft .Net, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-30399chainguarddotnet-bootstrap-8+72
EPSS score1.07%
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2020-1108microsoftmicrosoft .net framework 2.0 service pack 2+88EPSS score6.46%
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application.
The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.CVE-2020-36846alpinebrotli+160EPSS score0.63%
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.CVE-2022-21986fedoraprojectfedora+82EPSS score3.74%
.NET Denial of Service VulnerabilityCVE-2022-41032ubuntudotnet6+94EPSS score1.29%
NuGet Client Elevation of Privilege VulnerabilityCVE-2022-29145fedoraprojectfedora+22EPSS score5.43%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-29117fedoraprojectfedora+25EPSS score5.69%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-38013ubuntudotnet6+87EPSS score4.04%
.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2022-24512fedoraprojectfedora+130EPSS score1.61%
.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2022-24464fedoraprojectfedora+23EPSS score3.55%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-30184fedoraprojectfedora+79EPSS score5.70%
.NET and Visual Studio Information Disclosure VulnerabilityCVE-2022-34716microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+57EPSS score2.43%
.NET Spoofing VulnerabilityCVE-2022-23267fedoraprojectfedora+28EPSS score5.70%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2024-21392ubuntudotnet7+63EPSS score3.09%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2024-21319ubuntudotnet6+19EPSS score2.89%
Microsoft Identity Denial of service vulnerabilityCVE-2024-21409microsoftmicrosoft .net framework 3.5 and 4.7.2+22EPSS score2.51%
.NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityCVE-2024-26190microsoftmicrosoft visual studio 2022 version 17.4+20EPSS score2.99%
Microsoft QUIC Denial of Service VulnerabilityCVE-2024-20672microsoft.net+2EPSS score2.90%
.NET Denial of Service VulnerabilityCVE-2024-0057ubuntudotnet6+29EPSS score2.78%
NET, .NET Framework, and Visual Studio Security Feature Bypass VulnerabilityCVE-2024-0056microsoftmicrosoft .net framework 2.0 service pack 2+22EPSS score1.18%
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability