Microsoft .NET 8.0 vulnerabilities, page 5
92 vulnerabilities
Known vulnerabilities in Microsoft .NET 8.0, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-50646ubuntudotnet7+18
EPSS score4.02%
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.CVE-2026-50527chainguarddotnet-bootstrap-8+26EPSS score1.17%
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50659chainguarddotnet-bootstrap-8+36EPSS score0.74%
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.CVE-2026-50649ubuntudotnet7+13EPSS score4.02%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.CVE-2026-50525chainguardaspnet-8-targeting-pack+37EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-50528chainguarddotnet-bootstrap-8+28EPSS score0.61%
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-50526ubuntudotnet10+13EPSS score0.22%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.CVE-2026-35433ubuntudotnet7+13EPSS score0.57%
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-33116chainguarddotnet-10-sdk+36EPSS score2.44%
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.CVE-2023-36038microsoftasp.net_core+7EPSS score2.78%
ASP.NET Core Denial of Service VulnerabilityCVE-2023-36558ubuntudotnet6+15EPSS score1.08%
ASP.NET Core Security Feature Bypass VulnerabilityCVE-2023-36049ubuntudotnet6+24EPSS score6.79%
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability