Known vulnerabilities in Microsoft .NET Framework - page 3

Vendor: Microsoft
Software: Microsoft .NET Framework
Software CPE: cpe:2.3:a:microsoft:microsoft_net_framework:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 123
Public exploits: 17
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft .NET Framework Microsoft .NET Framework is affected by 123 known vulnerabilities: 2 critical, 55 high, 40 medium, 26 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102784 - Out-of-bounds read
CVE-2025-21176		 CWE-125 High
No
No
 - 15.01.2025 SB2025011536
SB2025011647
SB2025011671
and 6 more
#VU98277 - Inefficient Algorithmic Complexity
CVE-2024-43484		 CWE-407 Medium
No
No
 - 09.10.2024 SB2024100939
SB2024100946
SB2024100978
and 10 more
#VU98276 - Inefficient Algorithmic Complexity
CVE-2024-43483		 CWE-407 Medium
No
No
 - 09.10.2024 SB2024100939
SB2024100946
SB2024100978
and 11 more
#VU94058 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-38081		 CWE-59 Low
No
No
 - 10.07.2024 SB2024071013
SB2025060327
#VU88749 - Information Exposure Through an Error Message
CVE-2024-29059		 CWE-209 Medium
Available
Exploited
 3.0.50727.8975, 4.7.4076.0, 4.8.4682.0, 4.8.9206.0, 10.0.10240.20402, 10.0.14393.6614 17.04.2024 SB20240417118
#VU88430 - Use After Free
CVE-2024-21409		 CWE-416 Medium
No
No
 - 10.04.2024 SB2024041074
SB20240806201
#VU85247 - Security Features
CVE-2024-0057		 CWE-254 High
No
No
 - 10.01.2024 SB2024011008
SB2024011058
SB2024011059
and 9 more
#VU85244 - Security Features
CVE-2024-0056		 CWE-254 High
No
No
 - 10.01.2024 SB2024011005
SB2024011058
SB2024011059
and 10 more
#VU85236 - Improper input validation
CVE-2024-21312		 CWE-20 Medium
No
No
 - 09.01.2024 SB2024010993
#VU83154 - Security Features
CVE-2023-36560		 CWE-254 Medium
No
No
 - 15.11.2023 SB2023111509
SB2024041517
#VU83152 - Permissions, Privileges, and Access Controls
CVE-2023-36049		 CWE-264 Medium
No
No
 - 15.11.2023 SB2023111508
SB2023111551
SB2023112362
and 10 more
#VU80722 - Improper input validation
CVE-2023-36788		 CWE-20 High
No
No
 3.0.30729.8957, 4.7.04063.05, 4.8.04667.02, 4.8.04667.03, 4.8.09186.0, 4.8.09186.01 13.09.2023 SB2023091317
SB2024041517
#VU80675 - Improper input validation
CVE-2023-36792		 CWE-20 High
No
No
 3.0.30729.8957, 4.7.04063.01, 4.7.04063.02, 4.7.04063.05, 4.8.04667.02, 4.8.04667.03, 4.8.09186.0, 4.8.09186.01 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU80674 - Improper input validation
CVE-2023-36793		 CWE-20 High
No
No
 - 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU80671 - Improper input validation
CVE-2023-36794		 CWE-20 High
No
No
 - 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU80669 - Improper input validation
CVE-2023-36796		 CWE-20 High
No
No
 3.0.30729.8957, 4.7.04063.01, 4.7.04063.02, 4.7.04063.05, 4.8.04667.03, 4.8.09186.0 12.09.2023 SB2023091258
SB2024041517
SB202502194467
#VU79243 - Permissions, Privileges, and Access Controls
CVE-2023-36899		 CWE-264 Medium
Available
No
 - 08.08.2023 SB20230808107
SB2024041517
#VU79241 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36873		 CWE-451 High
No
No
 - 08.08.2023 SB20230808105
SB2024041517
#VU77281 - Improper input validation
CVE-2023-29326		 CWE-20 High
No
No
 - 14.06.2023 SB2023061412
#VU77235 - Improper input validation
CVE-2023-29331		 CWE-20 Medium
No
No
 - 13.06.2023 SB2023061357
SB2023061450
SB2023061466
and 11 more


Showing elements 41 - 60 out of 123