Microsoft .Net vulnerabilities, page 5

129 vulnerabilities

Known vulnerabilities in Microsoft .Net, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8HighCVE-2026-69439ubuntu · dotnet7 +10 more.NET and Visual Studio Elevation of Privilege VulnerabilityHeap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.EPSS0.84%6.2MediumCVE-2026-45491chainguard · dotnet-bootstrap-8 +15 more.NET Tampering VulnerabilityImproper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.EPSS0.37%7.8HighCVE-2026-45490ubuntu · dotnet7 +4 more.NET SDK Elevation of Privilege VulnerabilityImproper authorization in .NET allows an authorized attacker to elevate privileges locally.EPSS0.42%7.5HighCVE-2026-45591chainguard · dotnet-bootstrap-8 +22 moreASP.NET Core Denial of Service VulnerabilityUncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.EPSS2.44%7.8HighCVE-2026-70354ubuntu · dotnet7 +20 more.NET Core Remote Code Execution VulnerabilityOut-of-bounds write in .NET allows an unauthorized attacker to execute code locally.EPSS0.36%7.5HighCVE-2026-32178chainguard · dotnet-bootstrap-8 +27 more.NET Spoofing VulnerabilityImproper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.EPSS2.09%7.5HighCVE-2026-32203ubuntu · dotnet10 +14 more.NET and Visual Studio Denial of Service VulnerabilityStack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.EPSS2.44%7.3HighCVE-2026-32177ubuntu · dotnet7 +16 more.NET Elevation of Privilege VulnerabilityHeap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.EPSS0.57%4.3MediumCVE-2026-32175ubuntu · dotnet7 +13 more.NET Core Tampering VulnerabilityA tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.EPSS0.64%7.5HighCVE-2026-50524chainguard · dotnet-bootstrap-8 +28 more.NET Framework Denial of Service VulnerabilityImproper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.EPSS1.23%7.5HighCVE-2026-50648chainguard · aspnet-8-targeting-pack +36 more.NET Framework Denial of Service VulnerabilityAllocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.EPSS1.17%7.5HighCVE-2026-50651chainguard · dotnet-bootstrap-8 +28 more.NET Denial of Service VulnerabilityAllocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.EPSS1.17%7.8HighCVE-2026-50650ubuntu · dotnet7 +16 more.NET Framework Elevation of Privilege VulnerabilityImproper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.EPSS0.46%7.8HighCVE-2026-50646ubuntu · dotnet7 +18 more.NET Framework Remote Code Execution VulnerabilityProtection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.EPSS4.02%7.5HighCVE-2026-50527chainguard · dotnet-bootstrap-8 +26 more.NET Framework Denial of Service VulnerabilityStack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.EPSS1.17%6.5MediumCVE-2026-50659chainguard · dotnet-bootstrap-8 +36 more.NET Spoofing VulnerabilityImproper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.EPSS0.74%7.8HighCVE-2026-50649ubuntu · dotnet7 +13 more.NET Remote Code Execution VulnerabilityDeserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.EPSS4.02%7.5HighCVE-2026-50525chainguard · aspnet-8-targeting-pack +37 more.NET Denial of Service VulnerabilityAllocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.EPSS1.17%8.2HighCVE-2026-50528chainguard · dotnet-bootstrap-8 +28 more.NET Security Feature Bypass VulnerabilityIncorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.EPSS0.61%7HighCVE-2026-50526ubuntu · dotnet10 +13 more.NET Tampering VulnerabilityImproper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.EPSS0.22%