.net Framework
by Microsoft
CVEs (181)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-36873 | 0.00 | — | 0.01 | Aug 8, 2023 | .NET Framework Spoofing Vulnerability | |||
| CVE-2023-32030 | 0.00 | — | 0.02 | Jun 14, 2023 | .NET and Visual Studio Denial of Service Vulnerability | |||
| CVE-2023-29331 | 0.00 | — | 0.03 | Jun 14, 2023 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | |||
| CVE-2023-24936 | 0.00 | — | 0.02 | Jun 14, 2023 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | |||
| CVE-2023-24895 | 0.00 | — | 0.01 | Jun 14, 2023 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | |||
| CVE-2023-29326 | 0.00 | — | 0.01 | Jun 14, 2023 | .NET Framework Remote Code Execution Vulnerability | |||
| CVE-2023-24897 | 0.00 | — | 0.01 | Jun 14, 2023 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | |||
| CVE-2023-21808 | 0.00 | — | 0.01 | Feb 14, 2023 | .NET and Visual Studio Remote Code Execution Vulnerability | |||
| CVE-2023-21722 | 0.00 | — | 0.01 | Feb 14, 2023 | .NET Framework Denial of Service Vulnerability | |||
| CVE-2022-41089 | 0.00 | — | 0.01 | Dec 13, 2022 | .NET Framework Remote Code Execution Vulnerability | |||
| CVE-2022-41064 | 0.00 | — | 0.01 | Nov 9, 2022 | .NET Framework Information Disclosure Vulnerability | |||
| CVE-2022-26929 | 0.00 | — | 0.01 | Sep 13, 2022 | .NET Framework Remote Code Execution Vulnerability | |||
| CVE-2022-30130 | 0.00 | — | 0.02 | May 10, 2022 | .NET Framework Denial of Service Vulnerability | |||
| CVE-2020-1476 | 0.00 | — | 0.01 | Aug 17, 2020 | An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow access to cached files. An attacker who successfully exploited this vulnerability could gain access to restricted files. To exploit this vulnerability, an… | |||
| CVE-2020-1108 | 0.00 | — | 0.12 | May 21, 2020 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'. | |||
| CVE-2019-1142 | 0.00 | — | 0.01 | Sep 11, 2019 | An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerability'. | |||
| CVE-2019-1006 | 0.00 | — | 0.06 | Jul 15, 2019 | An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'. | |||
| CVE-2019-0981 | 0.00 | — | 0.05 | May 16, 2019 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980. | |||
| CVE-2019-0980 | 0.00 | — | 0.05 | May 16, 2019 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981. | |||
| CVE-2019-0864 | 0.00 | — | 0.01 | May 16, 2019 | A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'. |
- CVE-2023-36873Aug 8, 2023risk 0.00cvss —epss 0.01
.NET Framework Spoofing Vulnerability
- CVE-2023-32030Jun 14, 2023risk 0.00cvss —epss 0.02
.NET and Visual Studio Denial of Service Vulnerability
- CVE-2023-29331Jun 14, 2023risk 0.00cvss —epss 0.03
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
- CVE-2023-24936Jun 14, 2023risk 0.00cvss —epss 0.02
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
- CVE-2023-24895Jun 14, 2023risk 0.00cvss —epss 0.01
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
- CVE-2023-29326Jun 14, 2023risk 0.00cvss —epss 0.01
.NET Framework Remote Code Execution Vulnerability
- CVE-2023-24897Jun 14, 2023risk 0.00cvss —epss 0.01
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
- CVE-2023-21808Feb 14, 2023risk 0.00cvss —epss 0.01
.NET and Visual Studio Remote Code Execution Vulnerability
- CVE-2023-21722Feb 14, 2023risk 0.00cvss —epss 0.01
.NET Framework Denial of Service Vulnerability
- CVE-2022-41089Dec 13, 2022risk 0.00cvss —epss 0.01
.NET Framework Remote Code Execution Vulnerability
- CVE-2022-41064Nov 9, 2022risk 0.00cvss —epss 0.01
.NET Framework Information Disclosure Vulnerability
- CVE-2022-26929Sep 13, 2022risk 0.00cvss —epss 0.01
.NET Framework Remote Code Execution Vulnerability
- CVE-2022-30130May 10, 2022risk 0.00cvss —epss 0.02
.NET Framework Denial of Service Vulnerability
- CVE-2020-1476Aug 17, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow access to cached files. An attacker who successfully exploited this vulnerability could gain access to restricted files. To exploit this vulnerability, an…
- CVE-2020-1108May 21, 2020risk 0.00cvss —epss 0.12
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.
- CVE-2019-1142Sep 11, 2019risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerability'.
- CVE-2019-1006Jul 15, 2019risk 0.00cvss —epss 0.06
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.
- CVE-2019-0981May 16, 2019risk 0.00cvss —epss 0.05
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.
- CVE-2019-0980May 16, 2019risk 0.00cvss —epss 0.05
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.
- CVE-2019-0864May 16, 2019risk 0.00cvss —epss 0.01
A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'.
Page 9 of 10