Product by Microsoft
Microsoft .net Framework 4.8
78 known vulnerabilities in Microsoft .net Framework 4.8 (Microsoft), 1 of them actively exploited (CISA KEV).
Key figures
78
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2024-29059 | .NET Framework Information Disclosure Vulnerability In CISA KEV | 7.5 | |
| High | CVE-2023-36899 | ASP.NET Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2026-50649 | .NET Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2026-50646 | .NET Framework Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2026-83520 | .NET Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-70035 | .NET Framework Remote Code Execution Vulnerability | 8.8 | |
| Critical | CVE-2024-0057 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability | 9.1 | |
| Critical | CVE-2023-36049 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 7.6 | |
| High | CVE-2026-33116 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | 7.5 | |
| High | CVE-2023-36560 | ASP.NET Security Feature Bypass Vulnerability | 8.8 | |
| High | CVE-2020-1108 | .NET Core & .NET Framework Denial of Service Vulnerability | 7.5 | |
| High | CVE-2025-21176 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-50652 | Azure Active Directory Denial of Service Vulnerability | 7.5 | |
| High | CVE-2024-21312 | .NET Framework Denial of Service Vulnerability | 7.5 | |
| High | CVE-2024-43484 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | 7.5 | |
| High | CVE-2024-43483 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | 7.5 | |
| High | CVE-2021-24111 | .NET Framework Denial of Service Vulnerability | 7.5 | |
| High | CVE-2022-26832 | .NET Framework Denial of Service Vulnerability | 7.5 | |
| High | CVE-2026-58280 | .NET Denial of Service Vulnerability | 7.5 | |
| High | CVE-2026-69651 | .NET Denial of Service Vulnerability | 7.5 | |
| High | CVE-2026-69522 | .NET and Visual Studio Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-96960 | .NET Denial of Service Vulnerability | 7.5 | |
| High | CVE-2026-96958 | .NET Denial of Service Vulnerability | 7.5 | |
| High | CVE-2026-70174 | .NET Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-21911 | .NET Framework Denial of Service Vulnerability | 7.5 |
News
- October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero dayscsoonline,
- NCSC-2026-0426 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0285 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0235 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0233 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Azurencsc-nl,
- NCSC-2026-0231 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windowsncsc-nl,