Microsoft .NET 10.0 vulnerabilities
67 vulnerabilities
Known vulnerabilities in Microsoft .NET 10.0, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-96957microsoftmicrosoft visual studio 2022 version 17.14+6
EPSS score0.45%
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-96238microsoftmicrosoft visual studio 2022 version 17.14+5EPSS score0.24%
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-96237microsoftmicrosoft visual studio 2022 version 17.14+4EPSS score0.55%
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-96235microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.74%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-96234microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.28%
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-96233chainguarddotnet-bootstrap-8+27EPSS score0.77%
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-96232microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.69%
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-96231chainguarddotnet-bootstrap-8+17EPSS score0.34%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-96229microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.81%
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-96225chainguarddotnet-bootstrap-8+17EPSS score0.34%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-96224microsoftmicrosoft .net framework 3.5+16EPSS score0.74%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-87697microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.84%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-85363microsoftmicrosoft .net framework 3.5+16EPSS score0.74%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.CVE-2026-83520microsoftmicrosoft .net framework 3.5+16EPSS score1.27%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70197microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.69%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70190microsoftmicrosoft visual studio 2022 version 17.14+4EPSS score0.46%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-70174microsoftmicrosoft .net framework 3.5+16EPSS score0.80%
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70165microsoftmicrosoft visual studio 2022 version 17.14+4EPSS score0.35%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-70161microsoftmicrosoft visual studio 2022 version 17.14+4EPSS score0.46%
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-70035microsoftmicrosoft .net framework 3.5+16EPSS score1.27%
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.