Microsoft .NET 8.0 Runtime vulnerabilities
52 vulnerabilities
Known vulnerabilities in Microsoft .NET 8.0 Runtime, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2026-105016microsoft · microsoft visual studio 2022 version 17.14 +18 moreMicrosoft QUIC Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.CVSS9.8CriticalEPSS1.66%PrioritiseCVE-2026-58280microsoft · microsoft .net framework 3.5 +37 more.NET Denial of Service VulnerabilityUncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.25%RoutineCVE-2026-96238microsoft · microsoft visual studio 2022 version 17.14 +13 more.NET Security Feature Bypass VulnerabilityOrigin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.CVSS6.5MediumEPSS0.30%RoutineCVE-2026-96237microsoft · microsoft visual studio 2022 version 17.14 +11 more.NET Remote Code Execution VulnerabilityInclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.CVSS7.5HighEPSS0.64%RoutineCVE-2026-96235microsoft · microsoft visual studio 2022 version 17.14 +12 more.NET Remote Code Execution VulnerabilityOut-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVSS8.8HighEPSS0.86%RoutineCVE-2026-96234microsoft · microsoft visual studio 2022 version 17.14 +12 more.NET Information Disclosure VulnerabilityOrigin validation error in .NET allows an unauthorized attacker to disclose information over a network.CVSS5.3MediumEPSS0.33%PrioritiseCVE-2026-96232microsoft · microsoft visual studio 2022 version 17.14 +12 more.NET Information Disclosure VulnerabilityOut-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.CVSS7.5HighEPSS0.90%RoutineCVE-2026-96229microsoft · microsoft visual studio 2022 version 17.14 +12 more.NET Information Disclosure VulnerabilityPermissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.CVSS6.5MediumEPSS0.95%PrioritiseCVE-2026-96233microsoft · microsoft .net framework 3.5 +35 moreASP.NET Core Denial of Service VulnerabilityOut-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS0.99%RoutineCVE-2026-96225microsoft · microsoft visual studio 2022 version 17.14 +25 more.NET Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVSS7.8HighEPSS0.41%RoutineCVE-2026-96231microsoft · microsoft visual studio 2022 version 17.14 +25 more.NET Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVSS7.8HighEPSS0.41%RoutineCVE-2026-85363microsoft · microsoft .net framework 3.5 +20 more.NET Framework Elevation of Privilege VulnerabilityInteger overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.CVSS8.8HighEPSS0.86%RoutineCVE-2026-83520microsoft · microsoft .net framework 3.5 +20 more.NET Remote Code Execution VulnerabilityDeserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVSS8.8HighEPSS1.44%RoutineCVE-2026-70035microsoft · microsoft .net framework 3.5 +20 more.NET Framework Remote Code Execution VulnerabilityDeserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.CVSS8.8HighEPSS1.44%RoutineCVE-2026-70007microsoft · microsoft .net framework 3.5 +20 more.NET Framework Remote Code Execution VulnerabilityOut-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.CVSS8.8HighEPSS0.80%RoutineCVE-2026-96224microsoft · microsoft .net framework 3.5 +20 more.NET Remote Code Execution VulnerabilityOut-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVSS8.8HighEPSS0.76%PrioritiseCVE-2026-70197microsoft · microsoft visual studio 2019 version 16.11 +27 more.NET and Visual Studio Remote Code Execution VulnerabilityOut-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVSS8.1HighEPSS0.79%RoutineCVE-2026-70174microsoft · microsoft .net framework 3.5 +20 more.NET Remote Code Execution VulnerabilityImproperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.CVSS8.8HighEPSS0.91%RoutineCVE-2026-87697microsoft · microsoft visual studio 2022 version 17.14 +12 more.NET Remote Code Execution VulnerabilityDeserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVSS8.8HighEPSS0.84%PrioritiseCVE-2026-69651microsoft · microsoft .net framework 3.5 +36 more.NET Denial of Service VulnerabilityInefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.25%