Microsoft .NET 8.0 Runtime vulnerabilities, page 2
52 vulnerabilities
Known vulnerabilities in Microsoft .NET 8.0 Runtime, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2026-66822microsoft · microsoft visual studio 2022 version 17.14 +28 more.NET Information Disclosure VulnerabilityInsertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.CVSS5.9MediumEPSS0.78%RoutineCVE-2026-71328microsoft · microsoft visual studio 2022 version 17.14 +13 more.NET and Visual Studio Remote Code Execution VulnerabilityHeap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.CVSS8.8HighEPSS0.82%RoutineCVE-2026-69304microsoft · asp.net core 10.0 +51 moreASP.NET Core Denial of Service VulnerabilityImproper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVSS5.9MediumEPSS0.85%RoutineCVE-2026-58649microsoft · microsoft visual studio 2022 version 17.14 +42 more.NET Information Disclosure VulnerabilityOrigin validation error in .NET allows an unauthorized attacker to disclose information over a network.CVSS6.5MediumEPSS0.36%RoutineCVE-2026-69439microsoft · microsoft visual studio 2022 version 17.14 +13 more.NET and Visual Studio Elevation of Privilege VulnerabilityHeap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.CVSS8.8HighEPSS0.82%RoutineCVE-2026-69522microsoft · microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2 +17 more.NET and Visual Studio Remote Code Execution VulnerabilityHeap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.CVSS8.8HighEPSS0.84%PrioritiseCVE-2026-62898microsoft · microsoft visual studio 2022 version 17.14 +14 moreMicrosoft QUIC Information Disclosure VulnerabilityUse after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.CVSS7.5HighEPSS1.03%RoutineCVE-2026-70354microsoft · microsoft .net framework 3.5 +23 more.NET Core Remote Code Execution VulnerabilityOut-of-bounds write in .NET allows an unauthorized attacker to execute code locally.CVSS7.8HighEPSS0.36%RoutineCVE-2026-62871microsoft · microsoft visual studio 2022 version 17.14 +13 more.NET Elevation of Privilege VulnerabilityOut-of-bounds write in .NET allows an unauthorized attacker to execute code locally.CVSS7.8HighEPSS0.47%RoutineCVE-2026-62909microsoft · microsoft visual studio 2022 version 17.14 +26 more.NET Elevation of Privilege VulnerabilityUncaught exception in .NET allows an authorized attacker to elevate privileges locally.CVSS7.8HighEPSS0.34%RoutineCVE-2026-62902microsoft · microsoft visual studio 2022 version 17.14 +13 more.NET Information Disclosure VulnerabilityInclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.CVSS6.5MediumEPSS0.87%PrioritiseCVE-2026-62901microsoft · microsoft visual studio 2022 version 17.14 +29 more.NET Denial of Service VulnerabilityUnchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.23%RoutineCVE-2026-62900microsoft · microsoft visual studio 2022 version 17.14 +18 more.NET Information Disclosure VulnerabilityImproper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.CVSS5.9MediumEPSS0.75%RoutineCVE-2026-62899microsoft · microsoft visual studio 2022 version 17.14 +26 more.NET Security Feature Bypass VulnerabilityInconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.CVSS5.9MediumEPSS0.75%RoutineCVE-2026-62897microsoft · microsoft .net framework 3.5 +19 more.NET Framework Remote Code Execution VulnerabilityInteger overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.CVSS7.0HighEPSS0.37%RoutineCVE-2026-50659microsoft · microsoft .net framework 3.5 +39 more.NET Spoofing VulnerabilityImproper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.CVSS6.5MediumEPSS0.74%PrioritiseCVE-2026-50651microsoft · microsoft visual studio 2022 version 17.12 +31 more.NET Denial of Service VulnerabilityAllocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.17%RoutineCVE-2026-50650microsoft · microsoft .net framework 3.5 +19 more.NET Framework Elevation of Privilege VulnerabilityImproper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.CVSS7.8HighEPSS0.46%RoutineCVE-2026-50649microsoft · microsoft .net framework 3.5 +16 more.NET Remote Code Execution VulnerabilityDeserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.CVSS7.8HighEPSS4.02%PrioritiseCVE-2026-50648microsoft · microsoft .net framework 3.5 +39 more.NET Framework Denial of Service VulnerabilityAllocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.CVSS7.5HighEPSS1.17%