Known vulnerabilities in Microsoft .NET Framework 3.5 - page 3

Vendor: Microsoft
Software: Microsoft .NET Framework
Version: 3.5
Software CPE: cpe:2.3:a:microsoft:microsoft_net_framework:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 71
Public exploits: 14
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft .NET Framework version 3.5 Microsoft .NET Framework 3.5 is affected by 71 vulnerabilities: 2 critical, 32 high, 19 medium, 18 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16868 - Exposure of sensitive information to an unauthorized actor
CVE-2019-0545		 CWE-200 Low
No
No
 - 08.01.2019 SB2019010814
#VU16473 - Improper input validation
CVE-2018-8517		 CWE-20 Low
No
No
 - 11.12.2018 SB2018121113
#VU16472 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-8540		 CWE-94 High
No
No
 - 11.12.2018 SB2018121113
#VU14378 - Exposure of sensitive information to an unauthorized actor
CVE-2018-8360		 CWE-200 Low
No
No
 - 14.08.2018 SB2018081418
#VU13766 - Improper input validation
CVE-2018-8284		 CWE-20 High
No
No
 - 10.07.2018 SB2018071011
#VU13768 - Permissions, Privileges, and Access Controls
CVE-2018-8202		 CWE-264 Low
No
No
 - 10.07.2018 SB2018071011
#VU13769 - Permissions, Privileges, and Access Controls
CVE-2018-8356		 CWE-264 Low
No
No
 - 10.07.2018 SB2018071011
#VU12466 - Permissions, Privileges, and Access Controls
CVE-2018-1039		 CWE-264 Low
No
No
 - 08.05.2018 SB2018050814
#VU12472 - Improper input validation
CVE-2018-0765		 CWE-20 Medium
No
No
 - 08.05.2018 SB2018050815
#VU9900 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-0764		 CWE-611 Low
No
No
 - 09.01.2018 SB2018010908
SB2018010909
#VU9899 - Improper input validation
CVE-2018-0786		 CWE-20 Low
No
No
 - 09.01.2018 SB2018010908
SB2018010909
#VU8254 - Improper input validation
CVE-2017-8759		 CWE-20 Critical
Public exploit available
Exploited
 - 12.09.2017 SB2017091210
#VU6475 - Improper Certificate Validation
CVE-2017-0248		 CWE-295 Low
No
No
 - 09.05.2017 SB2017050909
#VU6254 - Improper input validation
CVE-2017-0160		 CWE-20 High
Public exploit available
No
 - 11.04.2017 SB2017041106
SB2017041118
#VU965 - Memory corruption
CVE-2016-3396		 CWE-119 High
No
No
 - 13.10.2016 SB2016101102
SB2016101118
#VU963 - Memory corruption
CVE-2016-3393		 CWE-119 Critical
No
Exploited
 - 13.10.2016 SB2016101102
SB2016121332
#VU961 - Missing release of memory after effective lifetime
CVE-2016-3263		 CWE-401 Low
No
No
 - 13.10.2016 SB2016101102
SB2016110820
#VU960 - Missing release of memory after effective lifetime
CVE-2016-3262		 CWE-401 Low
No
No
 - 13.10.2016 SB2016101102
SB2016110819
#VU959 - Missing release of memory after effective lifetime
CVE-2016-3209		 CWE-401 Low
Public exploit available
No
 - 11.10.2016 SB2016101102
SB2016110822
#VU123 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3255		 CWE-22 Medium
No
No
 - 13.07.2016 SB2016071303
SB2016071220
SB2016071225


Showing elements 41 - 60 out of 71