Microsoft Net vulnerabilities
110 known vulnerabilities affecting microsoft/net.
Total CVEs
110
CISA KEV
2
actively exploited
Public exploits
1
Exploited in wild
3
Severity breakdown
CRITICAL4HIGH85MEDIUM21
Vulnerabilities
Page 5 of 6
CVE-2023-33128P3HIGHCVSS 7.3≥ 6.0.0, < 6.0.18≥ 7.0.0, < 7.0.72023-06-14
CVE-2023-33128 [HIGH] CWE-416 CVE-2023-33128: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2023-33126P3HIGHCVSS 7.3≥ 6.0.0, < 6.0.18≥ 7.0.0, < 7.0.72023-06-14
CVE-2023-33126 [HIGH] CVE-2023-33126: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2026-69806P3HIGHCVSS 7.0≥ 9.0.0, < 9.0.20≥ 10.0.0, < 10.0.12+6 more2026-09-08
CVE-2026-69806 [HIGH] CWE-94 CVE-2026-69806: Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62902P3MEDIUMCVSS 6.5≥ 8.0.0, < 8.0.30≥ 9.0.0, < 9.0.192026-08-11
CVE-2026-62902 [MEDIUM] CWE-693 CVE-2026-62902: Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2022-38013P3HIGHCVSS 7.5v6.0.02022-09-13
CVE-2022-38013 [HIGH] CWE-400 CVE-2022-38013: .NET Core and Visual Studio Denial of Service Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-21392P3HIGHCVSS 7.5≥ 7.0.0, < 7.0.17≥ 8.0.0, < 8.0.32024-03-12
CVE-2024-21392 [HIGH] CWE-400 CVE-2024-21392: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-38081P3HIGHCVSS 7.3≥ 6.0.0, < 6.0.322024-07-09
CVE-2024-38081 [HIGH] CWE-59 CVE-2024-38081: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2022-24512P3MEDIUMCVSS 6.3v5.0v6.0.02022-03-09
CVE-2022-24512 [MEDIUM] CWE-94 CVE-2022-24512: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2024-30045P3MEDIUMCVSS 6.3≥ 7.0.0, < 7.0.19≥ 8.0.0, < 8.0.52024-05-14
CVE-2024-30045 [MEDIUM] CWE-122 CVE-2024-30045: .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
nvd
CVE-2021-26423P3HIGHCVSS 7.5≥ 5.0, ≤ 5.0.82021-08-12
CVE-2021-26423 [HIGH] CVE-2021-26423: .NET Core and Visual Studio Denial of Service Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
nvd
CVE-2022-24464P3HIGHCVSS 7.5≥ 5.0, ≤ 5.0.14≥ 6.0.0, ≤ 6.0.22022-03-09
CVE-2022-24464 [HIGH] CWE-400 CVE-2022-24464: .NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
nvd
CVE-2023-29331P3HIGHCVSS 7.5v6.0.0v7.0.02023-06-14
CVE-2023-29331 [HIGH] CWE-400 CVE-2023-29331: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
nvd
CVE-2023-38178P3HIGHCVSS 7.5v6.0.02023-08-08
CVE-2023-38178 [HIGH] CWE-400 CVE-2023-38178: .NET Core and Visual Studio Denial of Service Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
nvd
CVE-2023-33135P3HIGHCVSS 7.3≥ 6.0.0, < 6.0.18≥ 7.0.0, < 7.0.72023-06-14
CVE-2023-33135 [HIGH] CVE-2023-33135: .NET and Visual Studio Elevation of Privilege Vulnerability
.NET and Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2026-62897P3HIGHCVSS 7.0≥ 8.0.0, < 8.0.30≥ 9.0.0, < 9.0.19+1 more2026-08-11
CVE-2026-62897 [HIGH] CWE-190 CVE-2026-62897: Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code loc
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-58649P3MEDIUMCVSS 6.5v11.0.0-preview1v11.0.0-preview2+5 more2026-09-08
CVE-2026-58649 [MEDIUM] CWE-346 CVE-2026-58649: Origin validation error in .NET allows an unauthorized attacker to disclose information over a netwo
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-41355P4MEDIUMCVSS 5.7v5.02021-10-13
CVE-2021-41355 [MEDIUM] CVE-2021-41355: .NET Core and Visual Studio Information Disclosure Vulnerability
.NET Core and Visual Studio Information Disclosure Vulnerability
nvd
CVE-2026-69304P3MEDIUMCVSS 5.9≥ 8.0.0, < 8.0.31≥ 9.0.0, < 9.0.20+1 more2026-09-08
CVE-2026-69304 [MEDIUM] CWE-409 CVE-2026-69304: Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthori
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-62900P3MEDIUMCVSS 5.9≥ 8.0.0, < 8.0.30≥ 9.0.0, < 9.0.19+1 more2026-08-11
CVE-2026-62900 [MEDIUM] CWE-212 CVE-2026-62900: Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2024-38167P4MEDIUMCVSS 6.5≥ 8.0.0, < 8.0.82024-08-13
CVE-2024-38167 [MEDIUM] CWE-319 CVE-2024-38167: .NET and Visual Studio Information Disclosure Vulnerability
.NET and Visual Studio Information Disclosure Vulnerability
nvd