Known vulnerabilities in Microsoft .NET Framework - page 2

Vendor: Microsoft
Software: Microsoft .NET Framework
Software CPE: cpe:2.3:a:microsoft:microsoft_net_framework:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 114
Public exploits: 17
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft .NET Framework Microsoft .NET Framework is affected by 114 known vulnerabilities: 2 critical, 49 high, 37 medium, 26 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134332 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-42913		 CWE-362 High
No
No
 1.2.7214.0 11.06.2026 SB2026061139
#VU134331 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-42909		 CWE-362 High
No
No
 1.2.7214.0, 2.0.1193.0 11.06.2026 SB2026061139
#VU134295 - Out-of-bounds read
CVE-2026-42908		 CWE-125 Medium
No
No
 2.0.1193.0 11.06.2026 SB2026061116
#VU134294 - Out-of-bounds read
CVE-2026-45639		 CWE-125 Medium
No
No
 1.2.7214.0, 2.0.1193.0 11.06.2026 SB2026061116
#VU134117 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-45491		 CWE-59 Low
No
No
 10.0.9 09.06.2026 SB2026060968
SB2026061283
SB2026061284
and 10 more
#VU134116 - Improper Authorization
CVE-2026-45490		 CWE-285 Low
No
No
 10.0.9 09.06.2026 SB2026060967
SB20260619133
SB20260619134
and 3 more
#VU131324 - Heap-based Buffer Overflow
CVE-2026-32177		 CWE-122 Low
No
No
 4.8.9334.0 and 4.8.4802.0 13.05.2026 SB2026051358
SB2026051478
SB2026051479
and 7 more
#VU126233 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-33116		 CWE-835 Medium
No
No
 2.0.50727.8982 & 3.0.30729.8976, 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0, 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0, 4.7.4141.0, 4.8.4801.0 15.04.2026 SB20260415152
SB2026041655
SB2026041656
and 19 more
#VU126153 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-32226		 CWE-362 Medium
No
No
 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0, 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0, 4.8.4801.0 15.04.2026 SB2026041580
#VU126152 - Improper Handling of Exceptional Conditions
CVE-2026-23666		 CWE-755 Medium
Available
No
 2.0.50727.8982 & 3.0.30729.8976, 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0, 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0, 4.7.4141.0, 4.8.4801.0 15.04.2026 SB2026041580
#VU117231 - Inadequate Encryption Strength
CVE-2025-55248		 CWE-326 Medium
No
No
 2.0.50727.8981 2.0.50727.8981, 4.7.04137.03 4.7.04137.03, 4.7.04137.06 4.7.04137.06, 4.8.1.09320.02 4.8.1.09320.02, 4.8.1.09321.01 4.8.1.09321.01, 4.8.04798.02 4.8.04798.02, 4.8.04798.04 4.8.04798.04, 10.0.14393.8519 10.0.14393.8519 15.10.2025 SB2025101588
SB20251015138
SB20251015139
and 9 more
#VU102784 - Out-of-bounds read
CVE-2025-21176		 CWE-125 High
No
No
 - 15.01.2025 SB2025011536
SB2025011647
SB2025011671
and 6 more
#VU98277 - Inefficient Algorithmic Complexity
CVE-2024-43484		 CWE-407 Medium
No
No
 - 09.10.2024 SB2024100939
SB2024100946
SB2024100978
and 10 more
#VU98276 - Inefficient Algorithmic Complexity
CVE-2024-43483		 CWE-407 Medium
No
No
 - 09.10.2024 SB2024100939
SB2024100946
SB2024100978
and 11 more
#VU94058 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-38081		 CWE-59 Low
No
No
 - 10.07.2024 SB2024071013
SB2025060327
#VU88749 - Information Exposure Through an Error Message
CVE-2024-29059		 CWE-209 Medium
Available
Exploited
 3.0.50727.8975, 4.7.4076.0, 4.8.4682.0, 4.8.9206.0, 10.0.10240.20402, 10.0.14393.6614 17.04.2024 SB20240417118
#VU88430 - Use After Free
CVE-2024-21409		 CWE-416 Medium
No
No
 - 10.04.2024 SB2024041074
SB20240806201
#VU85247 - Security Features
CVE-2024-0057		 CWE-254 High
No
No
 - 10.01.2024 SB2024011008
SB2024011058
SB2024011059
and 9 more
#VU85244 - Security Features
CVE-2024-0056		 CWE-254 High
No
No
 - 10.01.2024 SB2024011005
SB2024011058
SB2024011059
and 10 more
#VU85236 - Improper input validation
CVE-2024-21312		 CWE-20 Medium
No
No
 - 09.01.2024 SB2024010993


Showing elements 21 - 40 out of 114