Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
Microsoft

Microsoft Microsoft .NET Framework vulnerabilities

10 published CVEs name Microsoft Microsoft .NET Framework among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2019-0545

    An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka…

    Microsoft · .NET Core

    High7.5
  • CVE-2018-8540

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection…

    Microsoft · Microsoft .NET Framework

    Critical9.8
  • CVE-2018-8517

    A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability."…

    Microsoft · Microsoft .NET Framework

    High7.5
  • CVE-2018-8421

    A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execution Vulnerability."…

    Microsoft · Microsoft .NET Framework

    Critical9.8
  • CVE-2018-8360

    An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments, aka…

    Microsoft · Microsoft .NET Framework

    High7.5
  • CVE-2018-8356

    A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security…

    Microsoft · Microsoft .NET Framework

    Medium5.5
  • CVE-2018-8284

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection…

    Microsoft · Microsoft .NET Framework

    High8.1
  • CVE-2018-8260

    A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remote Code…

    Microsoft · .NET Framework

    High8.8
  • CVE-2018-8202

    An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET Framework Elevation…

    Microsoft · Microsoft .NET Framework

    High7.8
  • CVE-2018-1039

    A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework Device Guard…

    Microsoft · Microsoft .NET Framework

    High7.8
All 10 in the list