Known vulnerabilities in Microsoft .NET Framework - page 6

Vendor: Microsoft
Software: Microsoft .NET Framework
Software CPE: cpe:2.3:a:microsoft:microsoft_net_framework:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 123
Public exploits: 17
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft .NET Framework Microsoft .NET Framework is affected by 123 known vulnerabilities: 2 critical, 55 high, 40 medium, 26 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123139 - Permissions, Privileges, and Access Controls
CVE-2015-1673		 CWE-264 High
No
No
 - 23.02.2026 SB2015051322
SB2026022344
#VU6475 - Improper Certificate Validation
CVE-2017-0248		 CWE-295 Low
No
No
 - 09.05.2017 SB2017050909
#VU6254 - Improper input validation
CVE-2017-0160		 CWE-20 High
Available
No
 - 11.04.2017 SB2017041106
SB2017041118
#VU5665 - Improper input validation
CVE-2015-2464		 CWE-20 High
Available
No
 - 08.02.2017 SB2015081103
SB2015081106
#VU5664 - Improper input validation
CVE-2015-2463		 CWE-20 High
Available
No
 - 08.02.2017 SB2015081103
SB2015081106
#VU5662 - Improper input validation
CVE-2015-2455		 CWE-20 High
Available
No
 - 08.02.2017 SB2015081103
SB2015081106
#VU5660 - Improper input validation
CVE-2015-2462		 CWE-20 High
Available
No
 - 08.02.2017 SB2015081103
SB2015081106
#VU5658 - Improper input validation
CVE-2015-2460		 CWE-20 High
Available
No
 - 08.02.2017 SB2015081103
SB2015081106
#VU5046 - Permissions, Privileges, and Access Controls
CVE-2014-0257		 CWE-264 Medium
Available
No
 - 19.01.2017 SB2014021102
#VU5042 - Improper input validation
CVE-2014-0253		 CWE-20 Medium
No
No
 - 19.01.2017 SB2014021102
#VU5029 - Permissions, Privileges, and Access Controls
CVE-2014-0295		 CWE-264 High
No
No
 - 19.01.2017 SB2014021102
#VU2992 - Improper input validation
CVE-2012-0164		 CWE-20 Medium
No
No
 - 28.12.2016 SB2012041001
SB2012050803
#VU2986 - Buffer overflow
CVE-2012-0162		 CWE-120 High
No
No
 - 28.12.2016 SB2012050803
#VU965 - Memory corruption
CVE-2016-3396		 CWE-119 High
No
No
 - 13.10.2016 SB2016101102
SB2016101118
#VU963 - Memory corruption
CVE-2016-3393		 CWE-119 Critical
No
Exploited
 - 13.10.2016 SB2016101102
SB2016121332
#VU961 - Missing release of memory after effective lifetime
CVE-2016-3263		 CWE-401 Low
No
No
 - 13.10.2016 SB2016101102
SB2016110820
#VU960 - Missing release of memory after effective lifetime
CVE-2016-3262		 CWE-401 Low
No
No
 - 13.10.2016 SB2016101102
SB2016110819
#VU959 - Missing release of memory after effective lifetime
CVE-2016-3209		 CWE-401 Low
Available
No
 - 11.10.2016 SB2016101102
SB2016110822
#VU123 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3255		 CWE-22 Medium
No
No
 - 13.07.2016 SB2016071303
SB2016071220
SB2016071225
#VU5059 - Memory corruption
CVE-2016-0145		 CWE-119 High
Available
No
 - 12.04.2016 SB2016041203
SB2016041901


Showing elements 101 - 120 out of 123