Known vulnerabilities in .NET - page 5

Vendor: Microsoft
Software: .NET
Software CPE: cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
Total vulnerabilities: 119
Public exploits: 1
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting .NET .NET is affected by 119 known vulnerabilities: 36 high, 66 medium, 17 low Critical High Medium Low

Vulnerabilities (119)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154386 - Insertion of Sensitive Information Into Sent Data
CVE-2026-66822
CWE-201 Medium
No
No
8.0.32, 9.0.21 13.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154381 - Uncontrolled Recursion
CVE-2026-58280
CWE-674 Medium
No
No
8.0.32, 9.0.21 13.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154330 - Heap-based Buffer Overflow
CVE-2026-105016
CWE-122 High
No
No
8.0.32, 9.0.21 13.10.2026 SB2026101402
SB20261015156
SB20261015157
and 5 more
#VU80674 - Improper input validation
CVE-2023-36793
CWE-20 High
No
No
- 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU80671 - Improper input validation
CVE-2023-36794
CWE-20 High
No
No
- 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU79255 - Exposure of sensitive information to an unauthorized actor
CVE-2023-35391
CWE-200 Low
No
No
6.0.21, 7.0.10 08.08.2023 SB20230808137
SB2023092110
#VU79240 - Improper input validation
CVE-2023-38178
CWE-20 Medium
No
No
6.0.21 08.08.2023 SB20230808104
SB2023080903
SB2023081036
#VU79182 - Improper input validation
CVE-2023-35390
CWE-20 High
No
No
6.0.21, 7.0.10 08.08.2023 SB2023080884
SB2023080903
SB2023081036
and 12 more
#VU79145 - Improper input validation
CVE-2023-38180
CWE-20 High
No
Exploited
6.0.21, 7.0.10 08.08.2023 SB2023080865
SB2023080903
SB2023081036
and 12 more
#VU78214 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-33127
CWE-362 Low
No
No
- 12.07.2023 SB2023071279
#VU78213 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-33170
CWE-362 High
No
No
- 12.07.2023 SB2023071278
SB2023071280
SB2023071344
and 14 more
#VU77242 - Improper input validation
CVE-2023-24897
CWE-20 High
No
No
- 13.06.2023 SB2023061357
SB2023111618
#VU77239 - Improper input validation
CVE-2023-24895
CWE-20 High
No
No
- 13.06.2023 SB2023061357
SB2023111618
SB20250219564
#VU77237 - Permissions, Privileges, and Access Controls
CVE-2023-24936
CWE-264 High
No
No
- 13.06.2023 SB2023061357
SB2023061450
SB2023061466
and 9 more
#VU77235 - Improper input validation
CVE-2023-29331
CWE-20 Medium
No
No
- 13.06.2023 SB2023061357
SB2023061450
SB2023061466
and 11 more
#VU77231 - Permissions, Privileges, and Access Controls
CVE-2023-32032
CWE-264 Low
No
No
- 13.06.2023 SB2023061352
SB2023061450
SB2023061478
and 4 more
#VU77230 - Improper input validation
CVE-2023-33126
CWE-20 Medium
No
No
- 13.06.2023 SB2023061352
SB2023111618
#VU77229 - Improper input validation
CVE-2023-33128
CWE-20 Medium
No
No
- 13.06.2023 SB2023061352
SB2023061450
SB2023061466
and 10 more
#VU77226 - Permissions, Privileges, and Access Controls
CVE-2023-33135
CWE-264 Medium
No
No
- 13.06.2023 SB2023061352
SB2023111618
SB20250219564
#VU74917 - Uncontrolled Search Path Element
CVE-2023-28260
CWE-427 Medium
No
No
6.0.16, 7.0.5 11.04.2023 SB2023041173
SB2023041206
SB2023111618


Showing elements 81 - 100 out of 119