.NET Framework
CVEs (15)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-108398 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. | ||
| CVE-2026-62872 | Hig | 0.57 | 8.8 | 0.01 | Aug 11, 2026 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-65810 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2020-1066 | Hig | 0.51 | 7.8 | 0.03 | May 21, 2020 | An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the… | ||
| CVE-2026-85363 | Hig | 0.50 | 8.8 | 0.01 | Oct 13, 2026 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-70035 | Hig | 0.50 | 8.8 | 0.01 | Oct 13, 2026 | Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70007 | Hig | 0.50 | 8.8 | 0.01 | Oct 13, 2026 | Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97801 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network. | ||
| CVE-2023-36873 | Hig | 0.48 | 7.4 | 0.01 | Aug 8, 2023 | .NET Framework Spoofing Vulnerability | ||
| CVE-2026-50650 | Hig | 0.44 | 7.8 | 0.00 | Jul 14, 2026 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2026-50646 | Hig | 0.44 | 7.8 | 0.04 | Jul 14, 2026 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-70194 | Med | 0.42 | 6.5 | 0.00 | Oct 13, 2026 | Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2026-62897 | Hig | 0.39 | 7.0 | 0.00 | Aug 11, 2026 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-32226 | Med | 0.38 | 5.9 | 0.01 | Apr 14, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network. | ||
| CVE-2023-21722 | Med | 0.33 | 5.0 | 0.01 | Feb 14, 2023 | .NET Framework Denial of Service Vulnerability |
- risk 0.57cvss 8.8epss 0.01
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.
- risk 0.57cvss 8.8epss 0.01
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
- risk 0.51cvss 7.8epss 0.00
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.03
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the…
- risk 0.50cvss 8.8epss 0.01
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
- risk 0.50cvss 8.8epss 0.01
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
- risk 0.50cvss 8.8epss 0.01
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.
- risk 0.48cvss 7.4epss 0.01
.NET Framework Spoofing Vulnerability
- risk 0.44cvss 7.8epss 0.00
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
- risk 0.44cvss 7.8epss 0.04
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
- risk 0.42cvss 6.5epss 0.00
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.39cvss 7.0epss 0.00
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
- risk 0.38cvss 5.9epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
- risk 0.33cvss 5.0epss 0.01
.NET Framework Denial of Service Vulnerability