Known vulnerabilities in Microsoft .NET Core

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_.net_core:*:*:*:*:*:*:*:*
Total vulnerabilities: 25
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft .NET Core Microsoft .NET Core is affected by 25 known vulnerabilities: 8 high, 13 medium, 4 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72215 - Improper input validation
CVE-2023-21808
CWE-20 High
No
No
6.0.14, 7.0.3 15.02.2023 SB2023021504
SB2023111618
#VU71039 - Improper input validation
CVE-2023-21538
CWE-20 Medium
No
No
6.0.13 11.01.2023 SB2023011102
SB2023011104
SB2023011236
and 7 more
#VU70177 - Improper input validation
CVE-2022-41089
CWE-20 High
No
No
- 13.12.2022 SB2022121355
#VU68170 - Permissions, Privileges, and Access Controls
CVE-2022-41032
CWE-264 Low
No
No
- 11.10.2022 SB2022101160
SB2022101238
SB2022101604
and 17 more
#VU67286 - Improper input validation
CVE-2022-38013
CWE-20 Medium
No
No
- 14.09.2022 SB2022091402
SB2022091415
SB2022091462
and 12 more
#VU66307 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-34716
CWE-451 Medium
No
No
- 09.08.2022 SB2022080938
SB2022081224
SB2022081225
and 12 more
#VU64285 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30184
CWE-200 Medium
No
No
- 14.06.2022 SB2022061428
SB2022061640
SB2022061641
and 11 more
#VU62988 - Improper input validation
CVE-2022-29145
CWE-20 Medium
No
No
- 11.05.2022 SB2022051101
SB2022051220
SB2022051221
and 13 more
#VU62987 - Improper input validation
CVE-2022-29117
CWE-20 Medium
No
No
- 11.05.2022 SB2022051101
SB2022051220
SB2022051221
and 14 more
#VU62986 - Improper input validation
CVE-2022-23267
CWE-20 Medium
No
No
- 11.05.2022 SB2022051101
SB2022051220
SB2022051221
and 13 more
#VU61176 - Improper input validation
CVE-2022-24464
CWE-20 Medium
No
No
- 08.03.2022 SB2022030847
SB2022031021
SB2022031022
and 14 more
#VU61175 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24512
CWE-94 High
No
No
- 08.03.2022 SB2022030847
SB2022031021
SB2022031022
and 14 more
#VU60380 - Improper input validation
CVE-2022-21986
CWE-20 Medium
No
No
- 08.02.2022 SB2022020821
SB2022020936
SB2022020937
and 7 more
#VU57311 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41355
CWE-200 Low
No
No
- 12.10.2021 SB2021101250
SB2021101338
SB2021101339
and 1 more
#VU55694 - Improper input validation
CVE-2021-26423
CWE-20 Medium
No
No
- 10.08.2021 SB2021081011
SB2021081225
SB2021081226
and 4 more
#VU55693 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34485
CWE-200 Low
No
No
- 10.08.2021 SB2021081011
SB2021081225
SB2021081226
and 7 more
#VU53881 - Improper input validation
CVE-2021-31957
CWE-20 Medium
No
No
- 08.06.2021 SB2021060808
SB2021060927
SB2021060928
and 11 more
#VU53123 - Permissions, Privileges, and Access Controls
CVE-2021-31204
CWE-264 Low
No
No
- 11.05.2021 SB2021051141
SB2021051319
SB2021051320
and 15 more
#VU50494 - Improper input validation
CVE-2021-1721
CWE-20 Medium
No
No
- 09.02.2021 SB2021020950
SB2021021211
SB2021021212
and 12 more
#VU46905 - Buffer overflow
CVE-2020-8927
CWE-120 Medium
No
No
- 15.09.2020 SB2020092215
SB2020092701
SB2020092704
and 40 more


Showing elements 1 - 20 out of 25