Known vulnerabilities in Microsoft .NET Framework 4.7.2

Vendor: Microsoft
Software: Microsoft .NET Framework
Version: 4.7.2
Software CPE: cpe:2.3:a:microsoft:microsoft_net_framework:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 40
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft .NET Framework version 4.7.2 Microsoft .NET Framework 4.7.2 is affected by 40 vulnerabilities: 17 high, 15 medium, 8 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102784 - Out-of-bounds read
CVE-2025-21176		 CWE-125 High
No
No
 - 15.01.2025 SB2025011536
SB2025011647
SB2025011671
and 6 more
#VU98277 - Inefficient Algorithmic Complexity
CVE-2024-43484		 CWE-407 Medium
No
No
 - 09.10.2024 SB2024100939
SB2024100946
SB2024100978
and 10 more
#VU98276 - Inefficient Algorithmic Complexity
CVE-2024-43483		 CWE-407 Medium
No
No
 - 09.10.2024 SB2024100939
SB2024100946
SB2024100978
and 11 more
#VU94058 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-38081		 CWE-59 Low
No
No
 - 10.07.2024 SB2024071013
SB2025060327
#VU88430 - Use After Free
CVE-2024-21409		 CWE-416 Medium
No
No
 - 10.04.2024 SB2024041074
SB20240806201
#VU85247 - Security Features
CVE-2024-0057		 CWE-254 High
No
No
 - 10.01.2024 SB2024011008
SB2024011058
SB2024011059
and 9 more
#VU85244 - Security Features
CVE-2024-0056		 CWE-254 High
No
No
 - 10.01.2024 SB2024011005
SB2024011058
SB2024011059
and 10 more
#VU85236 - Improper input validation
CVE-2024-21312		 CWE-20 Medium
No
No
 - 09.01.2024 SB2024010993
#VU83154 - Security Features
CVE-2023-36560		 CWE-254 Medium
No
No
 - 15.11.2023 SB2023111509
SB2024041517
#VU83152 - Permissions, Privileges, and Access Controls
CVE-2023-36049		 CWE-264 Medium
No
No
 - 15.11.2023 SB2023111508
SB2023111551
SB2023112362
and 10 more
#VU80674 - Improper input validation
CVE-2023-36793		 CWE-20 High
No
No
 - 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU80671 - Improper input validation
CVE-2023-36794		 CWE-20 High
No
No
 - 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU79243 - Permissions, Privileges, and Access Controls
CVE-2023-36899		 CWE-264 Medium
Public exploit available
No
 - 08.08.2023 SB20230808107
SB2024041517
#VU79241 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36873		 CWE-451 High
No
No
 - 08.08.2023 SB20230808105
SB2024041517
#VU77281 - Improper input validation
CVE-2023-29326		 CWE-20 High
No
No
 - 14.06.2023 SB2023061412
#VU77242 - Improper input validation
CVE-2023-24897		 CWE-20 High
No
No
 - 13.06.2023 SB2023061357
SB2023111618
#VU77239 - Improper input validation
CVE-2023-24895		 CWE-20 High
No
No
 - 13.06.2023 SB2023061357
SB2023111618
SB20250219564
#VU77237 - Permissions, Privileges, and Access Controls
CVE-2023-24936		 CWE-264 High
No
No
 - 13.06.2023 SB2023061357
SB2023061450
SB2023061466
and 9 more
#VU77235 - Improper input validation
CVE-2023-29331		 CWE-20 Medium
No
No
 - 13.06.2023 SB2023061357
SB2023061450
SB2023061466
and 11 more
#VU77233 - Improper input validation
CVE-2023-32030		 CWE-20 Medium
No
No
 - 13.06.2023 SB2023061352


Showing elements 1 - 20 out of 40