Known vulnerabilities in .NET

Vendor: Microsoft
Software: .NET
Software CPE: cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
Total vulnerabilities: 92
Public exploits: 1
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting .NET .NET is affected by 92 known vulnerabilities: 23 high, 52 medium, 17 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142006 - Use After Free
CVE-2026-62898
CWE-416 Medium
No
No
8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141930 - Integer overflow
CVE-2026-62886
CWE-190 High
No
No
8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141923 - Out-of-bounds write
CVE-2026-62871
CWE-787 High
No
No
8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141876 - Integer overflow
CVE-2026-58641
CWE-190 High
No
No
8.0.30, 9.0.19 12.08.2026 SB20260812233
#VU141795 - Unchecked Return Value
CVE-2026-62909
CWE-252 Low
No
No
8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141793 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-62902
CWE-829 Medium
No
No
8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141792 - Unchecked Input for Loop Condition
CVE-2026-62901
CWE-606 Medium
No
No
8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141791 - Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-62900
CWE-212 Medium
No
No
8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141790 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-62899
CWE-444 Medium
No
No
8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141789 - Integer overflow
CVE-2026-62897
CWE-190 Medium
No
No
8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141498 - Out-of-bounds write
CVE-2026-70354
CWE-787 High
No
No
8.0.30, 9.0.19 11.08.2026 SB2026081155
SB2026081416
SB2026081417
and 4 more
#VU138087 - Allocation of Resources Without Limits or Throttling
CVE-2026-50651
CWE-770 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138086 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-50650
CWE-94 Low
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB2026082404
SB2026082405
#VU138085 - Deserialization of Untrusted Data
CVE-2026-50649
CWE-502 Low
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB2026082404
SB2026082405
#VU138082 - Protection Mechanism Failure
CVE-2026-50646
CWE-693 Low
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB2026082404
SB2026082405
#VU138081 - Improper Access Control
CVE-2026-50528
CWE-284 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138080 - Stack-based buffer overflow
CVE-2026-50527
CWE-121 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138079 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-50526
CWE-59 Low
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138078 - Allocation of Resources Without Limits or Throttling
CVE-2026-50525
CWE-770 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU137945 - Improper input validation
CVE-2026-50524
CWE-20 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more


Showing elements 1 - 20 out of 92