Known vulnerabilities in .NET - page 2

Vendor: Microsoft
Software: .NET
Software CPE: cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
Total vulnerabilities: 92
Public exploits: 1
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting .NET .NET is affected by 92 known vulnerabilities: 23 high, 52 medium, 17 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138139 - Type confusion
CVE-2026-57108
CWE-843 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138088 - Improper Encoding or Escaping of Output
CVE-2026-50659
CWE-116 Low
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138084 - Allocation of Resources Without Limits or Throttling
CVE-2026-50648
CWE-770 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU137927 - Allocation of Resources Without Limits or Throttling
CVE-2026-47302
CWE-770 Medium
No
No
8.0.29, 9.0.18 17.07.2026 SB2026071701
SB20260721104
SB2026082404
and 1 more
#VU137778 - Allocation of Resources Without Limits or Throttling
CVE-2026-56170
CWE-770 Medium
No
No
8.0.29, 9.0.18 15.07.2026 SB2026071577
SB2026082404
SB2026082405
#VU137777 - Authentication Bypass by Assumed-Immutable Data
CVE-2026-47303
CWE-302 Medium
No
No
8.0.29, 9.0.18 15.07.2026 SB2026071577
SB20260721104
SB2026082404
and 1 more
#VU137776 - Incorrect Implementation of Authentication Algorithm
CVE-2026-47300
CWE-303 Medium
No
No
8.0.29, 9.0.18 15.07.2026 SB2026071577
SB20260721104
SB2026082404
and 1 more
#VU134477 - Resource exhaustion
CVE-2026-45591
CWE-400 Medium
No
No
8.0.28, 9.0.17 12.06.2026 SB2026061277
SB2026061283
SB2026061284
and 10 more
#VU134117 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-45491
CWE-59 Low
No
No
8.0.28, 9.0.17 09.06.2026 SB2026060968
SB2026061283
SB2026061284
and 10 more
#VU134116 - Improper Authorization
CVE-2026-45490
CWE-285 Low
No
No
8.0.28, 9.0.17 09.06.2026 SB2026060967
SB20260619133
SB20260619134
and 3 more
#VU131366 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32175
CWE-22 Medium
No
No
8.0.27, 9.0.16 13.05.2026 SB2026051387
SB2026051478
SB2026051479
and 7 more
#VU131346 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-42899
CWE-835 Medium
No
No
8.0.27, 9.0.16 13.05.2026 SB2026051375
SB2026051478
SB2026051479
and 15 more
#VU131324 - Heap-based Buffer Overflow
CVE-2026-32177
CWE-122 Low
No
No
8.0.27, 9.0.16 13.05.2026 SB2026051358
SB2026051478
SB2026051479
and 7 more
#VU131323 - Improper input validation
CVE-2026-35433
CWE-20 Low
No
No
8.0.27, 9.0.16 13.05.2026 SB2026051358
SB2026051478
SB2026051479
and 7 more
#VU126242 - Stack-based buffer overflow
CVE-2026-32203
CWE-121 Medium
No
No
8.0.26, 9.0.15 15.04.2026 SB20260415155
SB2026041655
SB2026041656
and 19 more
#VU126233 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-33116
CWE-835 Medium
No
No
8.0.26, 9.0.15 15.04.2026 SB20260415152
SB2026041655
SB2026041656
and 19 more
#VU126231 - Improper Neutralization of Special Elements
CVE-2026-32178
CWE-138 Medium
No
No
8.0.26, 9.0.15 15.04.2026 SB20260415151
SB2026041655
SB2026041656
and 19 more
#VU126230 - Resource exhaustion
CVE-2026-26171
CWE-400 Medium
No
No
8.0.26, 9.0.15 15.04.2026 SB20260415151
SB2026041655
SB2026041656
and 19 more
#VU123779 - Out-of-bounds read
CVE-2026-26127
CWE-125 Medium
No
No
9.0.14, 10.0.4 10.03.2026 SB20260310127
SB2026031224
SB2026031227
and 7 more
#VU122602 - Improper Handling of Missing Special Element
CVE-2026-21218
CWE-166 Medium
No
No
8.0.24 8.0.24, 9.0.13 9.0.13 10.02.2026 SB2026021099
SB2026021229
SB20260216167


Showing elements 21 - 40 out of 92