VendorsMicrosoft.net_framework4.7
Vulnerabilities

Microsoft .net Framework 4.7

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

87CVEs
CVE-2018-0764
Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.
Published 2018-01-10 · Modified
7.5EPSS 0.089
CVE-2018-0765
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.
Published 2018-05-09 · Modified
7.5EPSS 0.083
CVE-2019-1083
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'.
Published 2019-07-15 · Modified
7.5EPSS 0.078
CVE-2020-1108
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.
Published 2020-05-21 · Modified
7.5EPSS 0.063
CVE-2019-1006
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.
Published 2019-07-15 · Modified
7.5EPSS 0.060
CVE-2019-0820
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.
Published 2019-05-16 · Modified
7.5EPSS 0.057
CVE-2018-8517
A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.
Published 2018-12-12 · Modified
7.5EPSS 0.057
CVE-2017-0248
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."
Published 2017-05-12 · Modified
7.5EPSS 0.055
CVE-2019-0981
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.
Published 2019-05-16 · Modified
7.5EPSS 0.049
CVE-2019-0980
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.
Published 2019-05-16 · Modified
7.5EPSS 0.049
CVE-2021-24111
.NET Framework Denial of Service Vulnerability
Published 2021-02-25 · Modified
7.5EPSS 0.038
CVE-2018-0786
Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."
Published 2018-01-10 · Modified
7.5EPSS 0.037
CVE-2022-26832
.NET Framework Denial of Service Vulnerability
Published 2022-04-15 · Modified
7.5EPSS 0.036
CVE-2024-21312
.NET Framework Denial of Service Vulnerability
Published 2024-01-09 · Modified
7.5EPSS 0.036
CVE-2022-21911
.NET Framework Denial of Service Vulnerability
Published 2022-01-11 · Modified
7.5EPSS 0.031
CVE-2024-43484
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Published 2024-10-08 · Modified
7.5EPSS 0.029
CVE-2024-43483
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Published 2024-10-08 · Analyzed
7.5EPSS 0.029
CVE-2023-29331
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Published 2023-06-14 · Modified
7.5EPSS 0.026
CVE-2026-33116
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Published 2026-04-14 · Modified
7.5EPSS 0.024
CVE-2023-32030
.NET and Visual Studio Denial of Service Vulnerability
Published 2023-06-14 · Modified
7.5EPSS 0.022
CVE-2026-50652
Azure Active Directory Denial of Service Vulnerability
Published 2026-07-14 · Analyzed
7.5EPSS 0.017
CVE-2023-24936
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
Published 2023-06-14 · Modified
7.5EPSS 0.016
CVE-2026-23666
.NET Framework Denial of Service Vulnerability
Published 2026-04-14 · Modified
7.5EPSS 0.013
CVE-2026-47302
.NET Denial of Service Vulnerability
Published 2026-07-14 · Analyzed
7.5EPSS 0.012
CVE-2026-50368
Windows Active Directory Federation Services Denial of Service Vulnerability
Published 2026-07-14 · Analyzed
7.5EPSS 0.012
CVE-2026-50355
Windows Active Directory Federation Services Denial of Service Vulnerability
Published 2026-07-14 · Analyzed
7.5EPSS 0.012
CVE-2026-50411
Windows Active Directory Federation Services Denial of Service Vulnerability
Published 2026-07-14 · Analyzed
7.5EPSS 0.012
CVE-2026-50525
.NET Denial of Service Vulnerability
Published 2026-07-14 · Analyzed
7.5EPSS 0.012
CVE-2026-50527
.NET Framework Denial of Service Vulnerability
Published 2026-07-14 · Analyzed
7.5EPSS 0.012
CVE-2026-50647
Active Directory Federation Server Denial of Service Vulnerability
Published 2026-07-14 · Analyzed
7.5EPSS 0.012
CVE-2026-50648
.NET Framework Denial of Service Vulnerability
Published 2026-07-14 · Analyzed
7.5EPSS 0.012
CVE-2026-50653
Azure Active Directory Denial of Service Vulnerability
Published 2026-07-14 · Analyzed
7.5EPSS 0.012
CVE-2023-36873
.NET Framework Spoofing Vulnerability
Published 2023-08-08 · Modified
7.4EPSS 0.015
CVE-2024-21409
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
Published 2024-04-09 · Modified
7.3EPSS 0.025
CVE-2024-38081
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
Published 2024-07-09 · Modified
7.3EPSS 0.013
CVE-2026-32177
.NET Elevation of Privilege Vulnerability
Published 2026-05-12 · Modified
7.3EPSS 0.006
CVE-2026-50659
.NET Spoofing Vulnerability
Published 2026-07-14 · Analyzed
6.5EPSS 0.007
CVE-2019-0657
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.
Published 2019-03-06 · Modified
5.9EPSS 0.045
CVE-2022-41064
.NET Framework Information Disclosure Vulnerability
Published 2022-11-09 · Modified
5.8EPSS 0.008
CVE-2025-55248
.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability
Published 2025-10-14 · Analyzed
5.7EPSS 0.007
← Prev2 / 3Next →