Known vulnerabilities in Microsoft .NET Framework - page 2

Vendor: Microsoft
Software: Microsoft .NET Framework
Software CPE: cpe:2.3:a:microsoft:microsoft_net_framework:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 123
Public exploits: 17
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft .NET Framework Microsoft .NET Framework is affected by 123 known vulnerabilities: 2 critical, 55 high, 40 medium, 26 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138086 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-50650		 CWE-94 Low
No
No
 2.0.50727.8983 & 3.0.30729.8978, 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0, 4.7.4143.0, 4.8.4803.0, 4.8.9340.0 17.07.2026 SB2026071706
SB2026082404
SB2026082405
#VU138084 - Allocation of Resources Without Limits or Throttling
CVE-2026-50648		 CWE-770 Medium
No
No
 2.0.50727.8983 & 3.0.30729.8978, 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0, 4.7.4143.0, 4.8.4803.0, 4.8.9340.0 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU137927 - Allocation of Resources Without Limits or Throttling
CVE-2026-47302		 CWE-770 Medium
No
No
 2.0.50727.8983 & 3.0.30729.8978, 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0, 4.7.4143.0, 4.8.4803.0, 4.8.9340.0, 10.0.6 17.07.2026 SB2026071701
SB20260721104
SB2026082404
and 1 more
#VU134477 - Resource exhaustion
CVE-2026-45591		 CWE-400 Medium
No
No
 10.0.9 12.06.2026 SB2026061277
SB2026061283
SB2026061284
and 10 more
#VU134336 - Use After Free
CVE-2026-42985		 CWE-416 High
No
No
 1.2.7214.0, 2.0.1193.0 11.06.2026 SB2026061139
#VU134335 - Use After Free
CVE-2026-44801		 CWE-416 High
No
No
 1.2.7214.0, 2.0.1193.0 11.06.2026 SB2026061139
#VU134334 - Heap-based Buffer Overflow
CVE-2026-44799		 CWE-122 High
No
No
 1.2.7214.0, 2.0.1193.0 11.06.2026 SB2026061139
#VU134333 - Heap-based Buffer Overflow
CVE-2026-42992		 CWE-122 High
No
No
 2.0.1193.0 11.06.2026 SB2026061139
#VU134332 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-42913		 CWE-362 High
No
No
 1.2.7214.0 11.06.2026 SB2026061139
#VU134331 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-42909		 CWE-362 High
No
No
 1.2.7214.0, 2.0.1193.0 11.06.2026 SB2026061139
#VU134327 - Heap-based Buffer Overflow
CVE-2026-47289		 CWE-122 High
No
No
 2.0.1193.0 11.06.2026 SB2026061139
#VU134295 - Out-of-bounds read
CVE-2026-42908		 CWE-125 Medium
No
No
 2.0.1193.0 11.06.2026 SB2026061116
#VU134294 - Out-of-bounds read
CVE-2026-45639		 CWE-125 Medium
No
No
 1.2.7214.0, 2.0.1193.0 11.06.2026 SB2026061116
#VU134117 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-45491		 CWE-59 Low
No
No
 10.0.9 09.06.2026 SB2026060968
SB2026061283
SB2026061284
and 10 more
#VU134116 - Improper Authorization
CVE-2026-45490		 CWE-285 Low
No
No
 10.0.9 09.06.2026 SB2026060967
SB20260619133
SB20260619134
and 3 more
#VU131324 - Heap-based Buffer Overflow
CVE-2026-32177		 CWE-122 Low
No
No
 4.8.9334.0 and 4.8.4802.0 13.05.2026 SB2026051358
SB2026051478
SB2026051479
and 7 more
#VU126233 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-33116		 CWE-835 Medium
No
No
 2.0.50727.8982 & 3.0.30729.8976, 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0, 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0, 4.7.4141.0, 4.8.4801.0 15.04.2026 SB20260415152
SB2026041655
SB2026041656
and 19 more
#VU126153 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-32226		 CWE-362 Medium
No
No
 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0, 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0, 4.8.4801.0 15.04.2026 SB2026041580
#VU126152 - Improper Handling of Exceptional Conditions
CVE-2026-23666		 CWE-755 Medium
Available
No
 2.0.50727.8982 & 3.0.30729.8976, 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0, 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0, 4.7.4141.0, 4.8.4801.0 15.04.2026 SB2026041580
#VU117231 - Inadequate Encryption Strength
CVE-2025-55248		 CWE-326 Medium
No
No
 2.0.50727.8981 2.0.50727.8981, 4.7.04137.03 4.7.04137.03, 4.7.04137.06 4.7.04137.06, 4.8.1.09320.02 4.8.1.09320.02, 4.8.1.09321.01 4.8.1.09321.01, 4.8.04798.02 4.8.04798.02, 4.8.04798.04 4.8.04798.04, 10.0.14393.8519 10.0.14393.8519 15.10.2025 SB2025101588
SB20251015138
SB20251015139
and 9 more


Showing elements 21 - 40 out of 123