VendorsMicrosoft.netany version
Vulnerabilities

Microsoft .net any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

93CVEs
CVE-2021-26701
.NET Core Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
9.8EPSS 0.301
CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
Published 2023-11-14 · Modified
9.8EPSS 0.125
CVE-2021-24112
.NET Core Remote Code Execution Vulnerability
Published 2021-02-25 · Modified
9.8EPSS 0.033
CVE-2024-0057
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
Published 2024-01-09 · Modified
9.8EPSS 0.028
CVE-2026-47304
.NET Security Feature Bypass Vulnerability
Published 2026-07-14 · Analyzed
9.8EPSS 0.003
CVE-2026-47303
ASP.NET Core Elevation of Privilege Vulnerability
Published 2026-07-14 · Analyzed
8.8EPSS 0.008
CVE-2026-47300
ASP.NET Core Elevation of Privilege Vulnerability
Published 2026-07-14 · Analyzed
8.8EPSS 0.008
CVE-2026-71328
.NET and Visual Studio Remote Code Execution Vulnerability
Published 2026-09-08 · Analyzed
8.8EPSS 0.008
CVE-2024-0056
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
Published 2024-01-09 · Modified
8.7EPSS 0.012
CVE-2026-50528
.NET Security Feature Bypass Vulnerability
Published 2026-07-14 · Analyzed
8.2EPSS 0.006
CVE-2024-35264
.NET and Visual Studio Remote Code Execution Vulnerability
Published 2024-07-09 · Modified
8.1EPSS 0.026
CVE-2024-38229
.NET and Visual Studio Remote Code Execution Vulnerability
Published 2024-10-08 · Modified
8.1EPSS 0.021
CVE-2023-33170
ASP.NET and Visual Studio Security Feature Bypass Vulnerability
Published 2023-07-11 · Modified
8.1EPSS 0.020
CVE-2023-33127
.NET and Visual Studio Elevation of Privilege Vulnerability
Published 2023-07-11 · Modified
8.1EPSS 0.019
CVE-2025-26646
.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
Published 2025-05-13 · Analyzed
8.0EPSS 0.012
CVE-2026-50646
.NET Framework Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
7.8EPSS 0.040
CVE-2026-50649
.NET Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
7.8EPSS 0.040
CVE-2023-35390
.NET and Visual Studio Remote Code Execution Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.021
CVE-2023-28260
.NET DLL Hijacking Remote Code Execution Vulnerability
Published 2023-04-11 · Modified
7.8EPSS 0.015
CVE-2021-31204
.NET and Visual Studio Elevation of Privilege Vulnerability
Published 2021-05-11 · Modified
7.8EPSS 0.014
CVE-2026-58641
.NET Elevation of Privilege Vulnerability
Published 2026-08-11 · Analyzed
7.8EPSS 0.005
CVE-2026-62886
.NET Elevation of Privilege Vulnerability
Published 2026-08-11 · Analyzed
7.8EPSS 0.005
CVE-2026-62871
.NET Elevation of Privilege Vulnerability
Published 2026-08-11 · Analyzed
7.8EPSS 0.005
CVE-2026-50650
.NET Framework Elevation of Privilege Vulnerability
Published 2026-07-14 · Analyzed
7.8EPSS 0.005
CVE-2026-45490
.NET SDK Elevation of Privilege Vulnerability
Published 2026-06-09 · Modified
7.8EPSS 0.004
CVE-2026-70354
.NET Core Remote Code Execution Vulnerability
Published 2026-08-11 · Analyzed
7.8EPSS 0.004
CVE-2026-26131
.NET Elevation of Privilege Vulnerability
Published 2026-03-10 · Analyzed
7.8EPSS 0.003
CVE-2026-62909
.NET Elevation of Privilege Vulnerability
Published 2026-08-11 · Analyzed
7.8EPSS 0.003
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Published 2023-10-10 · Analyzed
7.5KEV1 PoCEPSS 1.000
CVE-2023-38171
Microsoft QUIC Denial of Service Vulnerability
Published 2023-10-10 · Modified
7.5EPSS 0.697
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability
Published 2023-08-08 · Analyzed
7.5KEVEPSS 0.140
CVE-2023-36435
Microsoft QUIC Denial of Service Vulnerability
Published 2023-10-10 · Modified
7.5EPSS 0.055
CVE-2021-31957
ASP.NET Core Denial of Service Vulnerability
Published 2021-06-08 · Modified
7.5EPSS 0.051
CVE-2026-25667
ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet, because of an incorrect exit condition for HTTP/3 Encoder/Decoder stream processing.
Published 2026-03-19 · Modified
7.5EPSS 0.042
CVE-2021-26423
.NET Core and Visual Studio Denial of Service Vulnerability
Published 2021-08-12 · Modified
7.5EPSS 0.039
CVE-2022-21986
.NET Denial of Service Vulnerability
Published 2022-02-09 · Modified
7.5EPSS 0.037
CVE-2022-24464
.NET and Visual Studio Denial of Service Vulnerability
Published 2022-03-09 · Modified
7.5EPSS 0.036
CVE-2024-21392
.NET and Visual Studio Denial of Service Vulnerability
Published 2024-03-12 · Analyzed
7.5EPSS 0.031
CVE-2024-43485
.NET and Visual Studio Denial of Service Vulnerability
Published 2024-10-08 · Analyzed
7.5EPSS 0.031
CVE-2024-26190
Microsoft QUIC Denial of Service Vulnerability
Published 2024-03-12 · Analyzed
7.5EPSS 0.030
1 / 3Next →