Microsoft Net vulnerabilities
100 known vulnerabilities affecting microsoft/net.
Total CVEs
100
CISA KEV
2
actively exploited
Public exploits
1
Exploited in wild
3
Severity breakdown
CRITICAL4HIGH77MEDIUM19
Vulnerabilities
Page 4 of 5
CVE-2023-24895P3HIGHCVSS 7.8v6.0.0v7.0.02023-06-14
CVE-2023-24895 [HIGH] CVE-2023-24895: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2023-24936P3HIGHCVSS 7.5v6.0.0v7.0.02023-06-14
CVE-2023-24936 [HIGH] CVE-2023-24936: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2024-43484P3HIGHCVSS 7.5≥ 6.0.0, < 6.0.35≥ 8.0.0, < 8.0.102024-10-08
CVE-2024-43484 [HIGH] CWE-407 CVE-2024-43484: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-43483P3HIGHCVSS 7.5≥ 6.0.0, < 6.0.35≥ 8.0.0, < 8.0.102024-10-08
CVE-2024-43483 [HIGH] CWE-407 CVE-2024-43483: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
nvd
CVE-2022-23267P3HIGHCVSS 7.5v5.0v6.0.02022-05-10
CVE-2022-23267 [HIGH] CVE-2022-23267: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-21392P3HIGHCVSS 7.5≥ 7.0.0, < 7.0.17≥ 8.0.0, < 8.0.32024-03-12
CVE-2024-21392 [HIGH] CWE-400 CVE-2024-21392: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-43485P3HIGHCVSS 7.5≥ 6.0.0, < 6.0.35≥ 8.0.0, < 8.0.102024-10-08
CVE-2024-43485 [HIGH] CWE-407 CVE-2024-43485: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-30105P3HIGHCVSS 7.5≥ 8.0.0, ≤ 8.0.72024-07-09
CVE-2024-30105 [HIGH] CWE-400 CVE-2024-30105: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2026-62899P3MEDIUMCVSS 5.9≥ 8.0.0, < 8.0.30≥ 9.0.0, < 9.0.19+1 more2026-08-11
CVE-2026-62899 [MEDIUM] CWE-444 CVE-2026-62899: Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an u
Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2024-43499P3HIGHCVSS 7.5v9.0.02024-11-12
CVE-2024-43499 [HIGH] CWE-409 CVE-2024-43499: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2023-33128P3HIGHCVSS 7.3≥ 6.0.0, < 6.0.18≥ 7.0.0, < 7.0.72023-06-14
CVE-2023-33128 [HIGH] CWE-416 CVE-2023-33128: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2023-33126P3HIGHCVSS 7.3≥ 6.0.0, < 6.0.18≥ 7.0.0, < 7.0.72023-06-14
CVE-2023-33126 [HIGH] CVE-2023-33126: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2022-29117P3HIGHCVSS 7.5v5.0v6.0.02022-05-10
CVE-2022-29117 [HIGH] CWE-400 CVE-2022-29117: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2022-29145P3HIGHCVSS 7.5v5.0v6.0.02022-05-10
CVE-2022-29145 [HIGH] CWE-400 CVE-2022-29145: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2026-62902P3MEDIUMCVSS 6.5≥ 8.0.0, < 8.0.30≥ 9.0.0, < 9.0.192026-08-11
CVE-2026-62902 [MEDIUM] CWE-693 CVE-2026-62902: Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2024-30045P3MEDIUMCVSS 6.3≥ 7.0.0, < 7.0.19≥ 8.0.0, < 8.0.52024-05-14
CVE-2024-30045 [MEDIUM] CWE-122 CVE-2024-30045: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2022-38013P3HIGHCVSS 7.5v6.0.02022-09-13
CVE-2022-38013 [HIGH] CWE-400 CVE-2022-38013: .NET Core and Visual Studio Denial of Service Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-38095P3HIGHCVSS 7.5≥ 8.0.0, < 8.0.72024-07-09
CVE-2024-38095 [HIGH] CWE-20 CVE-2024-38095: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-38168P3HIGHCVSS 7.5≥ 8.0.0, < 8.0.82024-08-13
CVE-2024-38168 [HIGH] CWE-400 CVE-2024-38168: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-38081P3HIGHCVSS 7.3≥ 6.0.0, < 6.0.322024-07-09
CVE-2024-38081 [HIGH] CWE-59 CVE-2024-38081: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
nvd