Microsoft .NET 10.0 Runtime vulnerabilities, page 3
52 vulnerabilities
Known vulnerabilities in Microsoft .NET 10.0 Runtime, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2026-50648microsoft · microsoft .net framework 3.5 +39 more.NET Framework Denial of Service VulnerabilityAllocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.17%PrioritiseCVE-2026-50528microsoft · microsoft visual studio 2022 version 17.12 +31 more.NET Security Feature Bypass VulnerabilityIncorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.CVSS8.2HighEPSS0.61%PrioritiseCVE-2026-50527microsoft · microsoft .net framework 3.5 +29 more.NET Framework Denial of Service VulnerabilityStack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.17%RoutineCVE-2026-50526microsoft · microsoft visual studio 2022 version 17.12 +16 more.NET Tampering VulnerabilityImproper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.CVSS7.0HighEPSS0.22%PrioritiseCVE-2026-50525microsoft · microsoft .net framework 3.5 +40 more.NET Denial of Service VulnerabilityAllocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.17%PrioritiseCVE-2026-50524microsoft · microsoft visual studio 2022 version 17.12 +31 more.NET Framework Denial of Service VulnerabilityImproper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.23%PrioritiseCVE-2026-47304microsoft · microsoft .net framework 3.5 +45 more.NET Security Feature Bypass VulnerabilityImproper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.CVSS9.8CriticalEPSS0.29%RoutineCVE-2026-47303microsoft · microsoft visual studio 2022 version 17.12 +16 moreASP.NET Core Elevation of Privilege VulnerabilityAuthentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.CVSS8.8HighEPSS0.84%PrioritiseCVE-2026-47302microsoft · microsoft .net framework 3.5 +51 more.NET Denial of Service VulnerabilityAllocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.17%RoutineCVE-2026-47300microsoft · microsoft visual studio 2022 version 17.12 +16 moreASP.NET Core Elevation of Privilege VulnerabilityIncorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.CVSS8.8HighEPSS0.78%PrioritiseCVE-2026-57108microsoft · .net 10.0 runtime +22 more.NET Denial of Service VulnerabilityAccess of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.17%PrioritiseCVE-2026-56170microsoft · .net 10.0 runtime +20 moreASP.NET Core Denial of Service VulnerabilityAllocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.17%