Product by Microsoft
Microsoft .NET Framework
207 known vulnerabilities in Microsoft .NET Framework (Microsoft), 5 of them actively exploited (CISA KEV).
Key figures
207
Vulnerabilities
5
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2020-0646 | Microsoft .NET Framework Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2024-29059 | .NET Framework Information Disclosure Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2020-1147 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2017-8759 | Microsoft .NET Framework Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2015-1671 | Microsoft Windows Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| High | CVE-2023-36899 | ASP.NET Elevation of Privilege Vulnerability | 8.8 | |
| Critical | CVE-2018-8421 | Microsoft .NET Framework: Remote Code Execution | 9.8 | |
| High | CVE-2026-50649 | .NET Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2026-50646 | .NET Framework Remote Code Execution Vulnerability | 7.8 | |
| Critical | CVE-2018-8540 | Microsoft .NET Framework: Code Injection | 9.8 | |
| Critical | CVE-2016-0132 | Microsoft .NET Framework: Security Feature Bypass | 9.8 | |
| High | CVE-2016-0145 | Microsoft .NET Framework: Memory Corruption | 8.8 | |
| High | CVE-2020-0606 | Microsoft .NET Core: Remote Code Execution | 8.8 | |
| High | CVE-2020-0605 | Microsoft .NET Core: Remote Code Execution | 8.8 | |
| High | CVE-2018-8260 | Microsoft .NET Framework: Remote Code Execution | 8.8 | |
| High | CVE-2019-0613 | Microsoft: Remote Code Execution | 8.8 | |
| High | CVE-2018-8284 | Microsoft .NET Framework: Code Injection | 8.1 | |
| High | CVE-2019-1113 | Microsoft: Remote Code Execution | 8.8 | |
| High | CVE-2009-2502 | Microsoft SQL Server: Buffer Overflow | 8.1 | |
| High | CVE-2013-3129 | Microsoft Silverlight: Code Execution | 7.8 | |
| High | CVE-2012-0014 | Microsoft Silverlight: Code Execution | 7.8 | |
| High | CVE-2017-0160 | Microsoft .NET Framework: Remote Code Execution | 7.8 | |
| High | CVE-2011-1271 | Microsoft .NET Framework: Code Execution | 7.7 | |
| High | CVE-2016-3255 | Microsoft .NET Framework: XML External Entity (XXE) | 7.5 | |
| High | CVE-2016-0148 | Microsoft .NET Framework: Privilege Escalation | 7.8 |
News
- NCSC-2026-0426 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0285 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0235 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0233 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Azurencsc-nl,
- NCSC-2026-0231 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windowsncsc-nl,
- SSA-472448 V1.0: Security Bypass Vulnerability in the SQL Client-Server Communication in Siveillance Videosiemens-productcert