Known vulnerabilities in Microsoft .NET Framework - page 5

Vendor: Microsoft
Software: Microsoft .NET Framework
Software CPE: cpe:2.3:a:microsoft:microsoft_net_framework:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 114
Public exploits: 17
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft .NET Framework Microsoft .NET Framework is affected by 114 known vulnerabilities: 2 critical, 49 high, 37 medium, 26 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU14378 - Exposure of sensitive information to an unauthorized actor
CVE-2018-8360		 CWE-200 Low
No
No
 - 14.08.2018 SB2018081418
#VU13767 - Improper input validation
CVE-2018-8260		 CWE-20 High
No
No
 - 10.07.2018 SB2018071011
#VU13766 - Improper input validation
CVE-2018-8284		 CWE-20 High
No
No
 - 10.07.2018 SB2018071011
#VU13768 - Permissions, Privileges, and Access Controls
CVE-2018-8202		 CWE-264 Low
No
No
 - 10.07.2018 SB2018071011
#VU13769 - Permissions, Privileges, and Access Controls
CVE-2018-8356		 CWE-264 Low
No
No
 - 10.07.2018 SB2018071011
#VU12466 - Permissions, Privileges, and Access Controls
CVE-2018-1039		 CWE-264 Low
No
No
 - 08.05.2018 SB2018050814
#VU12472 - Improper input validation
CVE-2018-0765		 CWE-20 Medium
No
No
 - 08.05.2018 SB2018050815
#VU9900 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-0764		 CWE-611 Low
No
No
 - 09.01.2018 SB2018010908
SB2018010909
#VU9899 - Improper input validation
CVE-2018-0786		 CWE-20 Low
No
No
 - 09.01.2018 SB2018010908
SB2018010909
#VU8254 - Improper input validation
CVE-2017-8759		 CWE-20 Critical
Available
Exploited
 - 12.09.2017 SB2017091210
#VU7458 - Improper input validation
CVE-2017-8585		 CWE-20 Medium
No
No
 - 11.07.2017 SB2017071124
SB2024100809
#VU6475 - Improper Certificate Validation
CVE-2017-0248		 CWE-295 Low
No
No
 - 09.05.2017 SB2017050909
#VU6254 - Improper input validation
CVE-2017-0160		 CWE-20 High
Available
No
 - 11.04.2017 SB2017041106
SB2017041118
#VU965 - Memory corruption
CVE-2016-3396		 CWE-119 High
No
No
 - 13.10.2016 SB2016101102
SB2016101118
#VU963 - Memory corruption
CVE-2016-3393		 CWE-119 Critical
No
Exploited
 - 13.10.2016 SB2016101102
SB2016121332
#VU961 - Missing release of memory after effective lifetime
CVE-2016-3263		 CWE-401 Low
No
No
 - 13.10.2016 SB2016101102
SB2016110820
#VU960 - Missing release of memory after effective lifetime
CVE-2016-3262		 CWE-401 Low
No
No
 - 13.10.2016 SB2016101102
SB2016110819
#VU959 - Missing release of memory after effective lifetime
CVE-2016-3209		 CWE-401 Low
Available
No
 - 11.10.2016 SB2016101102
SB2016110822
#VU123 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3255		 CWE-22 Medium
No
No
 - 13.07.2016 SB2016071303
SB2016071220
SB2016071225
#VU5059 - Memory corruption
CVE-2016-0145		 CWE-119 High
Available
No
 - 12.04.2016 SB2016041203
SB2016041901


Showing elements 81 - 100 out of 114