Microsoft .Net vulnerabilities, page 4
129 vulnerabilities
Known vulnerabilities in Microsoft .Net, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2026-62900chainguard · dotnet-sdk-10.0.2 +15 more.NET Information Disclosure VulnerabilityImproper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.EPSS0.75%HighCVE-2026-62897ubuntu · dotnet7 +16 more.NET Framework Remote Code Execution VulnerabilityInteger overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.EPSS0.37%MediumCVE-2026-62899chainguard · dotnet-bootstrap-8 +23 more.NET Security Feature Bypass VulnerabilityInconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.EPSS0.75%HighCVE-2026-62909chainguard · dotnet-bootstrap-8 +23 more.NET Elevation of Privilege VulnerabilityUncaught exception in .NET allows an authorized attacker to elevate privileges locally.EPSS0.26%HighCVE-2026-62898ubuntu · dotnet7 +11 moreMicrosoft QUIC Information Disclosure VulnerabilityUse after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.EPSS1.03%HighCVE-2026-26127chainguard · dotnet-bootstrap-10 +24 more.NET Denial of Service VulnerabilityOut-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.EPSS1.22%HighCVE-2026-26171chainguard · dotnet-10-sdk +32 more.NET Denial of Service VulnerabilityUncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.EPSS2.26%HighCVE-2026-26131chainguard · dotnet-bootstrap-10 +10 more.NET Elevation of Privilege VulnerabilityIncorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.EPSS0.31%HighCVE-2026-47303ubuntu · dotnet10 +13 moreASP.NET Core Elevation of Privilege VulnerabilityAuthentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.EPSS0.84%HighCVE-2026-47300ubuntu · dotnet10 +13 moreASP.NET Core Elevation of Privilege VulnerabilityIncorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.EPSS0.78%CriticalCVE-2026-47304chainguard · aspnet-8-targeting-pack +42 more.NET Security Feature Bypass VulnerabilityImproper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.EPSS0.29%HighCVE-2026-47302chainguard · aspnet-8-targeting-pack +48 more.NET Denial of Service VulnerabilityAllocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.EPSS1.17%HighCVE-2026-42899chainguard · dotnet-bootstrap-8 +70 moreASP.NET Core Denial of Service VulnerabilityLoop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.EPSS2.44%HighCVE-2026-25667microsoft · .netmicrosoft .netASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet, because of an incorrect exit condition for HTTP/3 Encoder/Decoder stream processing.EPSS4.34%HighCVE-2026-56170ubuntu · dotnet10 +20 moreASP.NET Core Denial of Service VulnerabilityAllocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.EPSS1.17%HighCVE-2026-58641microsoft · .net +1 more.NET Elevation of Privilege VulnerabilityInteger overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.EPSS0.47%MediumCVE-2026-58649ubuntu · dotnet10 +39 more.NET Information Disclosure VulnerabilityOrigin validation error in .NET allows an unauthorized attacker to disclose information over a network.EPSS0.27%HighCVE-2026-57108chainguard · dotnet-bootstrap-8 +19 more.NET Denial of Service VulnerabilityAccess of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.EPSS1.17%HighCVE-2026-69806ubuntu · dotnet10 +10 more.NET Elevation of Privilege VulnerabilityExposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.EPSS0.76%MediumCVE-2026-69304chainguard · aspnet-8-targeting-pack +48 moreASP.NET Core Denial of Service VulnerabilityImproper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.EPSS0.88%