Microsoft .NET 8.0 vulnerabilities
93 vulnerabilities
Known vulnerabilities in Microsoft .NET 8.0, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-96238microsoftmicrosoft visual studio 2022 version 17.14+5
EPSS score0.24%
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-96237microsoftmicrosoft visual studio 2022 version 17.14+4EPSS score0.55%
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-96235microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.74%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-96234microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.28%
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-96233chainguarddotnet-bootstrap-8+27EPSS score0.77%
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-96232microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.69%
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-96231chainguarddotnet-bootstrap-8+17EPSS score0.34%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-96229microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.81%
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-96225chainguarddotnet-bootstrap-8+17EPSS score0.34%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-96224microsoftmicrosoft .net framework 3.5+16EPSS score0.74%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-87697microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.84%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-85363microsoftmicrosoft .net framework 3.5+16EPSS score0.74%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.CVE-2026-83520microsoftmicrosoft .net framework 3.5+16EPSS score1.27%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70197microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.69%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70174microsoftmicrosoft .net framework 3.5+16EPSS score0.80%
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70035microsoftmicrosoft .net framework 3.5+16EPSS score1.27%
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.CVE-2026-70007microsoftmicrosoft .net framework 3.5+16EPSS score0.64%
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.CVE-2026-69651chainguarddotnet-bootstrap-8+28EPSS score1.10%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-66822chainguarddotnet-bootstrap-8+20EPSS score0.67%
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-58280chainguarddotnet-bootstrap-8+29EPSS score1.10%
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.