Microsoft .NET 9.0 vulnerabilities, page 2
80 vulnerabilities
Known vulnerabilities in Microsoft .NET 9.0, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-69651chainguarddotnet-bootstrap-8+33
EPSS score1.10%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-66822chainguarddotnet-bootstrap-8+25EPSS score0.67%
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-58280chainguarddotnet-bootstrap-8+34EPSS score1.10%
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-105016ubuntudotnet7+15EPSS score0.99%
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.CVE-2025-21173chainguarddotnet-bootstrap-9+12EPSS score1.24%
.NET Elevation of Privilege VulnerabilityCVE-2025-21176chainguarddotnet-bootstrap-9+36EPSS score2.35%
.NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityCVE-2025-21171chainguarddotnet-bootstrap-9+23EPSS score1.70%
.NET Remote Code Execution VulnerabilityCVE-2025-21172chainguarddotnet-bootstrap-9+29EPSS score1.81%
.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2025-55248chainguarddotnet-bootstrap-8+37EPSS score0.72%
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.CVE-2025-55247ubuntudotnet10+10EPSS score0.61%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2025-26646chainguarddotnet-8+66EPSS score1.27%
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.CVE-2025-30399chainguarddotnet-bootstrap-8+72EPSS score1.07%
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2024-43499chainguarddotnet-bootstrap-9+11EPSS score2.60%
.NET and Visual Studio Denial of Service VulnerabilityCVE-2024-43498chainguarddotnet-bootstrap-9+11EPSS score3.59%
.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-21218chainguarddotnet-10+15EPSS score1.01%
Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.CVE-2026-71328ubuntudotnet7+10EPSS score0.76%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2026-62871ubuntudotnet7+10EPSS score0.47%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.CVE-2026-62901chainguarddotnet-bootstrap-8+26EPSS score1.23%
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-62886ubuntudotnet7+19EPSS score0.47%
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-62902ubuntudotnet7+10EPSS score0.87%
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.