Microsoft Net Framework 3.0 Service Pack 2 vulnerabilities
22 known vulnerabilities affecting microsoft/microsoft_net_framework_3.0_service_pack_2.
Total CVEs
22
CISA KEV
1
actively exploited
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL2HIGH18MEDIUM2
Vulnerabilities
Page 1 of 2
CVE-2024-29059P1HIGHCVSS 7.5KEVPoC≥ 3.0.0, < 3.0.50727.89762024-03-23
CVE-2024-29059 [HIGH] CWE-209 CVE-2024-29059: .NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability
nvd
CVE-2020-1066P1HIGHCVSS 7.8ExploitedPoCRansomware≥ 3.0.0, < publication2020-05-21
CVE-2020-1066 [HIGH] CVE-2020-1066: An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to el
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.
To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.
The update addresses the vulnerability by correcting how .NET Framework activates COM objects.
nvd
CVE-2023-36049P3CRITICALCVSS 9.8≥ 3.0.0, < 3.0.50727.89752023-11-14
CVE-2023-36049 [CRITICAL] CWE-20 CVE-2023-36049: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2024-0057P3CRITICALCVSS 9.8≥ 3.0.0, < 3.0.50727.89762024-01-09
CVE-2024-0057 [CRITICAL] CWE-20 CVE-2024-0057: NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
nvd
CVE-2020-1108P3HIGHCVSS 7.5≥ 3.0.0, < publication2020-05-21
CVE-2020-1108 [HIGH] CVE-2020-1108: A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web req
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could ex
nvd
CVE-2023-24936P3HIGHCVSS 7.5≥ 3.0.0, < 3.0.6920.8954; 2.0.50727.89702023-06-14
CVE-2023-24936 [HIGH] CVE-2023-24936: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2022-41089P3HIGHCVSS 7.8≥ 3.0.0, < 30729.89532022-12-13
CVE-2022-41089 [HIGH] CVE-2022-41089: .NET Framework Remote Code Execution Vulnerability
.NET Framework Remote Code Execution Vulnerability
nvd
CVE-2023-24895P3HIGHCVSS 7.8≥ 3.0.0, < 3.0.6920.8954; 2.0.50727.89702023-06-14
CVE-2023-24895 [HIGH] CVE-2023-24895: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2023-36788P3HIGHCVSS 7.8≥ 3.0.0, < 3.0.30729.89572023-09-12
CVE-2023-36788 [HIGH] CVE-2023-36788: .NET Framework Remote Code Execution Vulnerability
.NET Framework Remote Code Execution Vulnerability
nvd
CVE-2024-43484P3HIGHCVSS 7.5≥ 3.0.0, < 3.0.30729.89742024-10-08
CVE-2024-43484 [HIGH] CWE-407 CVE-2024-43484: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-43483P3HIGHCVSS 7.5≥ 3.0.0, < 3.0.30729.89742024-10-08
CVE-2024-43483 [HIGH] CWE-407 CVE-2024-43483: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
nvd
CVE-2023-29326P3HIGHCVSS 7.8≥ 3.0.0, < 3.0.6920.8954; 2.0.50727.89702023-06-14
CVE-2023-29326 [HIGH] CVE-2023-29326: .NET Framework Remote Code Execution Vulnerability
.NET Framework Remote Code Execution Vulnerability
nvd
CVE-2023-29331P3HIGHCVSS 7.5≥ 3.0.0, < 3.0.6920.8954; 2.0.50727.89702023-06-14
CVE-2023-29331 [HIGH] CWE-400 CVE-2023-29331: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
nvd
CVE-2023-32030P3HIGHCVSS 7.5≥ 3.0.0, < 3.0.6920.8954; 2.0.50727.89702023-06-14
CVE-2023-32030 [HIGH] CVE-2023-32030: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2025-55248P4MEDIUMCVSS 5.7≥ 3.0.0, < 2.0.50727.89812025-10-14
CVE-2025-55248 [MEDIUM] CWE-326 CVE-2025-55248: Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
nvd
CVE-2023-36560HIGHCVSS 8.8≥ 3.0.0, < 3.0.50727.89752023-11-14
CVE-2023-36560 [HIGH] ASP.NET Security Feature Bypass Vulnerability
ASP.NET Security Feature Bypass Vulnerability
ASP.NET Security Feature Bypass Vulnerability
cvelistv5
CVE-2022-26832HIGHCVSS 7.5≥ 3.0.0, < 2.0.50727.89622022-04-15
CVE-2022-26832 [HIGH] .NET Framework Denial of Service Vulnerability
.NET Framework Denial of Service Vulnerability
.NET Framework Denial of Service Vulnerability
cvelistv5
CVE-2023-36796HIGHCVSS 7.8≥ 3.0.0, < 3.0.30729.89572023-09-12
CVE-2023-36796 [HIGH] CWE-191 Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
cvelistv5
CVE-2023-36792HIGHCVSS 7.8≥ 3.0.0, < 3.0.30729.89572023-09-12
CVE-2023-36792 [HIGH] CWE-190 Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
cvelistv5
CVE-2023-36793HIGHCVSS 7.8≥ 3.0.0, < 3.0.30729.89572023-09-12
CVE-2023-36793 [HIGH] CWE-122 Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
cvelistv5
1 / 2Next →