Known vulnerabilities in .NET 8.0.0

Vendor: Microsoft
Software: .NET
Version: 8.0.0
Software CPE: cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
Total vulnerabilities: 55
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting .NET version 8.0.0 .NET 8.0.0 is affected by 55 vulnerabilities: 7 high, 35 medium, 13 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138139 - Type confusion
CVE-2026-57108
CWE-843 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
#VU138088 - Improper Encoding or Escaping of Output
CVE-2026-50659
CWE-116 Low
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
#VU138087 - Allocation of Resources Without Limits or Throttling
CVE-2026-50651
CWE-770 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
#VU138086 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-50650
CWE-94 Low
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
#VU138085 - Deserialization of Untrusted Data
CVE-2026-50649
CWE-502 Low
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
#VU138084 - Allocation of Resources Without Limits or Throttling
CVE-2026-50648
CWE-770 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
#VU138082 - Protection Mechanism Failure
CVE-2026-50646
CWE-693 Low
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
#VU138081 - Improper Access Control
CVE-2026-50528
CWE-284 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
#VU138080 - Stack-based buffer overflow
CVE-2026-50527
CWE-121 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
#VU138079 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-50526
CWE-59 Low
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
#VU138078 - Allocation of Resources Without Limits or Throttling
CVE-2026-50525
CWE-770 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
#VU137945 - Improper input validation
CVE-2026-50524
CWE-20 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
#VU137927 - Allocation of Resources Without Limits or Throttling
CVE-2026-47302
CWE-770 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071701
SB20260721104
#VU137778 - Allocation of Resources Without Limits or Throttling
CVE-2026-56170
CWE-770 Medium
No
No
8.0.29, 9.0.18 15.07.2026 SB2026071577
#VU137777 - Authentication Bypass by Assumed-Immutable Data
CVE-2026-47303
CWE-302 Medium
No
No
8.0.29, 9.0.18 15.07.2026 SB2026071577
SB20260721104
#VU137776 - Incorrect Implementation of Authentication Algorithm
CVE-2026-47300
CWE-303 Medium
No
No
8.0.29, 9.0.18 15.07.2026 SB2026071577
SB20260721104
#VU134477 - Resource exhaustion
CVE-2026-45591
CWE-400 Medium
No
No
8.0.28, 9.0.17 12.06.2026 SB2026061277
SB2026061283
SB2026061284
and 10 more
#VU134117 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-45491
CWE-59 Low
No
No
8.0.28, 9.0.17 09.06.2026 SB2026060968
SB2026061283
SB2026061284
and 10 more
#VU134116 - Improper Authorization
CVE-2026-45490
CWE-285 Low
No
No
8.0.28, 9.0.17 09.06.2026 SB2026060967
SB20260619133
SB20260619134
and 3 more
#VU131366 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32175
CWE-22 Medium
No
No
8.0.27, 9.0.16 13.05.2026 SB2026051387
SB2026051478
SB2026051479
and 7 more


Showing elements 1 - 20 out of 55