Known vulnerabilities in Microsoft .NET Framework 3.5 - page 2

Vendor: Microsoft
Software: Microsoft .NET Framework
Version: 3.5
Software CPE: cpe:2.3:a:microsoft:microsoft_net_framework:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 71
Public exploits: 14
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft .NET Framework version 3.5 Microsoft .NET Framework 3.5 is affected by 71 vulnerabilities: 2 critical, 32 high, 19 medium, 18 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72215 - Improper input validation
CVE-2023-21808		 CWE-20 High
No
No
 - 15.02.2023 SB2023021504
SB2023111618
#VU72214 - Improper input validation
CVE-2023-21722		 CWE-20 Medium
No
No
 - 15.02.2023 SB2023021503
#VU70177 - Improper input validation
CVE-2022-41089		 CWE-20 High
No
No
 - 13.12.2022 SB2022121355
#VU69144 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41064		 CWE-200 Low
No
No
 - 09.11.2022 SB2022110906
SB2023020130
SB2023030911
#VU67260 - Improper input validation
CVE-2022-26929		 CWE-20 High
No
No
 - 13.09.2022 SB2022091362
#VU62981 - Improper input validation
CVE-2022-30130		 CWE-20 Low
No
No
 - 10.05.2022 SB2022051039
#VU62280 - Improper input validation
CVE-2022-26832		 CWE-20 Medium
No
No
 - 13.04.2022 SB2022041312
#VU59487 - Improper input validation
CVE-2022-21911		 CWE-20 Medium
No
No
 - 11.01.2022 SB2022011170
#VU47534 - Out-of-bounds read
CVE-2020-16937		 CWE-125 Low
No
No
 - 13.10.2020 SB2020101315
SB2022102512
#VU45631 - Permissions, Privileges, and Access Controls
CVE-2020-1476		 CWE-264 Low
No
No
 - 12.08.2020 SB2020081245
SB2022102512
#VU45617 - Improper input validation
CVE-2020-1046		 CWE-20 High
No
No
 - 12.08.2020 SB2020081231
#VU29836 - XML Injection
CVE-2020-1147		 CWE-91 High
Public exploit available
Exploited
 - 14.07.2020 SB2020071463
SB20200716119
SB20200716120
and 6 more
#VU27823 - Improper input validation
CVE-2020-1108		 CWE-20 Medium
No
No
 - 12.05.2020 SB2020051240
SB2020051421
SB2020051422
and 9 more
#VU24271 - Improper input validation
CVE-2020-0646		 CWE-20 High
Public exploit available
Exploited
 - 14.01.2020 SB2020011432
SB2022103134
#VU24270 - Improper input validation
CVE-2020-0606		 CWE-20 High
No
No
 - 14.01.2020 SB2020011432
SB2022103134
#VU24269 - Improper input validation
CVE-2020-0605		 CWE-20 High
No
No
 - 14.01.2020 SB2020011432
SB2022103134
#VU19139 - Improper input validation
CVE-2019-1083		 CWE-20 Medium
No
No
 - 10.07.2019 SB2019071024
#VU19137 - Improper input validation
CVE-2019-1113		 CWE-20 Medium
No
No
 - 10.07.2019 SB2019071024
#VU17640 - Memory corruption
CVE-2019-0613		 CWE-119 High
No
No
 - 13.02.2019 SB2019021312
SB2019021315
#VU17638 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-0657		 CWE-451 Low
No
No
 - 12.02.2019 SB2019021312
SB2019021315


Showing elements 21 - 40 out of 71