cbcvebase.

Microsoft Net vulnerabilities

110 known vulnerabilities affecting microsoft/net.

Total CVEs
110
CISA KEV
2
actively exploited
Public exploits
1
Exploited in wild
3
Severity breakdown
CRITICAL4HIGH85MEDIUM21

Vulnerabilities

Page 6 of 6
CVE-2025-55248P4MEDIUMCVSS 5.7≥ 8.0.0, < 8.0.21≥ 9.0.0, < 9.0.102025-10-14
CVE-2025-55248 [MEDIUM] CWE-326 CVE-2025-55248: Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
nvd
CVE-2023-36799P4MEDIUMCVSS 6.5v6.0.0v7.0.02023-09-12
CVE-2023-36799 [MEDIUM] CWE-400 CVE-2023-36799: .NET Core and Visual Studio Denial of Service Vulnerability .NET Core and Visual Studio Denial of Service Vulnerability
nvd
CVE-2024-21319P4MEDIUMCVSS 6.8≥ 6.0.0, < 6.0.26≥ 7.0.0, < 7.0.15+1 more2024-01-09
CVE-2024-21319 [MEDIUM] CWE-20 CVE-2024-21319: Microsoft Identity Denial of service vulnerability Microsoft Identity Denial of service vulnerability
nvd
CVE-2023-32032P4MEDIUMCVSS 6.5≥ 7.0.0, < 7.0.72023-06-14
CVE-2023-32032 [MEDIUM] CWE-20 CVE-2023-32032: .NET and Visual Studio Elevation of Privilege Vulnerability .NET and Visual Studio Elevation of Privilege Vulnerability
nvd
CVE-2026-45491P4MEDIUMCVSS 5.5≥ 8.0.0, < 8.0.28≥ 9.0.0, < 9.0.17+1 more2026-06-09
CVE-2026-45491 [MEDIUM] CWE-59 CVE-2026-45491: Improper link resolution before file access ('link following') in .NET allows an unauthorized attack Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.
nvd
CVE-2021-1721P4MEDIUMCVSS 6.5≥ 5.0, ≤ 5.0.22021-02-25
CVE-2021-1721 [MEDIUM] CVE-2021-1721: .NET Core and Visual Studio Denial of Service Vulnerability .NET Core and Visual Studio Denial of Service Vulnerability
nvd
CVE-2026-50526P4MEDIUMCVSS 5.5≥ 8.0.0, < 8.0.29≥ 9.0.0, < 9.0.18+1 more2026-07-14
CVE-2026-50526 [MEDIUM] CWE-59 CVE-2026-50526: Improper link resolution before file access ('link following') in .NET allows an authorized attacker Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
nvd
CVE-2022-30184P4MEDIUMCVSS 5.5v6.0.02022-06-15
CVE-2022-30184 [MEDIUM] CWE-200 CVE-2022-30184: .NET and Visual Studio Information Disclosure Vulnerability .NET and Visual Studio Information Disclosure Vulnerability
nvd
CVE-2023-36558P4MEDIUMCVSS 5.5≥ 6.0.0, < 6.0.25≥ 7.0.0, < 7.0.14+1 more2023-11-14
CVE-2023-36558 [MEDIUM] CVE-2023-36558: ASP.NET Core Security Feature Bypass Vulnerability ASP.NET Core Security Feature Bypass Vulnerability
nvd
CVE-2021-34485P4MEDIUMCVSS 5.5≥ 5.0, ≤ 5.0.82021-08-12
CVE-2021-34485 [MEDIUM] CWE-200 CVE-2021-34485: .NET Core and Visual Studio Information Disclosure Vulnerability .NET Core and Visual Studio Information Disclosure Vulnerability
nvd
← Previous6 / 6
Microsoft Net vulnerabilities | cvebase