Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Tag: net-framework Clear

ID	Title	Severity	Tags	Detected
CVE-2026-70354	Out-of-Bounds Write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354) out-of-bounds write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.	High	C# Cwe 787 Microsoft Visual Studio 2022 +17	2 weeks ago
CVE-2026-65810	Vulnerability in csharp (CVE-2026-65810) vulnerability in csharp (CVE-2026-65810). Successful exploitation can lead to full system takeover.	High	C# Path Traversal Cwe 23 Microsoft +14	2 weeks ago
CVE-2026-62897	Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62897) vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62897). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.	High	C# Cwe 190 Microsoft Net Framework +6	2 weeks ago
CVE-2026-62872	Authorization Flaw in csharp (CVE-2026-62872) vulnerability in csharp (CVE-2026-62872). Successful exploitation can lead to full system takeover.	High	C# Cwe 863 Microsoft Net Framework +13	2 weeks ago
CVE-2026-50650	Code Injection in Microsoft.WindowsDesktop.App.Runtime.win-x64 (CVE-2026-50650) code injection in Microsoft.WindowsDesktop.App.Runtime.win-x64 (CVE-2026-50650). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.	High	C# Cwe 94 Microsoft Net Framework +14	1 month ago
CVE-2026-50649	Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.	High	C# Insecure Deserialization Cwe 502 Microsoft +16	1 month ago
CVE-2026-50659	Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50659) vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50659). Data can be tampered with by attackers. Mitigation: upgrade to `8.0.29` or later.	Medium	C# Cwe 116 Microsoft Net Framework +20	1 month ago
CVE-2026-50646	Unsafe Deserialization in csharp (CVE-2026-50646) vulnerability in csharp (CVE-2026-50646). Successful exploitation can lead to full system takeover.	High	C# Cwe 502 Cwe 693 Microsoft +17	1 month ago
CVE-2026-50525	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-50525) vulnerability in System.Security.Cryptography.Xml (CVE-2026-50525). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.	High	C# Cwe 770 Microsoft Net Framework +20	1 month ago
CVE-2026-50527	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-50527) vulnerability in System.Security.Cryptography.Xml (CVE-2026-50527). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.	High	C# Cwe 121 Microsoft Net Framework +20	1 month ago
CVE-2026-50648	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-50648) vulnerability in System.Security.Cryptography.Xml (CVE-2026-50648). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.	High	C# Cwe 770 Microsoft Net Framework +20	1 month ago
CVE-2026-47304	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-47304) vulnerability in System.Security.Cryptography.Xml (CVE-2026-47304). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.4` or later.	High	C# Cwe 345 Cwe 347 Microsoft +24	1 month ago
CVE-2026-47302	Vulnerability in System.Security.Cryptography.Xml (CVE-2026-47302) vulnerability in System.Security.Cryptography.Xml (CVE-2026-47302). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.4` or later.	High	C# Cwe 770 Microsoft Net Framework +20	1 month ago
CVE-2026-50647	Vulnerability in microsoft (CVE-2026-50647) vulnerability in microsoft (CVE-2026-50647). Risk of unauthorized operations or information disclosure.	High	Cwe 835 Microsoft Windows 10 1607 Windows 10 1809 +12	1 month ago
CVE-2026-50411	Vulnerability in microsoft (CVE-2026-50411) vulnerability in microsoft (CVE-2026-50411). Risk of unauthorized operations or information disclosure.	High	Cwe 121 Microsoft Windows 10 1607 Windows 10 1809 +12	1 month ago
CVE-2026-50368	Vulnerability in microsoft (CVE-2026-50368) vulnerability in microsoft (CVE-2026-50368). Risk of unauthorized operations or information disclosure.	High	Cwe 121 Microsoft Windows 10 1607 Windows 10 1809 +12	1 month ago
CVE-2026-50355	Vulnerability in microsoft (CVE-2026-50355) vulnerability in microsoft (CVE-2026-50355). Risk of unauthorized operations or information disclosure.	High	Cwe 121 Microsoft Windows 10 1607 Windows 10 1809 +12	1 month ago
CVE-2026-50653	Vulnerability in microsoft (CVE-2026-50653) vulnerability in microsoft (CVE-2026-50653). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 835 Microsoft Net Framework +13	1 month ago
CVE-2026-50652	Unsafe Deserialization in deserialization (CVE-2026-50652) vulnerability in deserialization (CVE-2026-50652). Risk of unauthorized operations or information disclosure.	High	Insecure Deserialization Cwe 502 Microsoft Net Framework +13	1 month ago
CVE-2026-35433	Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-35433) vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-35433). Confidential information can be exposed externally. Mitigation: upgrade to `10.0.8` or later.	High	C# Cwe 20 Cwe 190 Microsoft +15	3 months ago
CVE-2026-32177	Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.	High	C# Cwe 20 Cwe 122 Cwe 787 +20	3 months ago
CVE-2026-23666	Vulnerability in csharp (CVE-2026-23666) vulnerability in csharp (CVE-2026-23666). Risk of unauthorized operations or information disclosure.	High	C# Cwe 755 Cwe 366 Microsoft +14	4 months ago
CVE-2026-33116	Vulnerability in dotnet-sdk (CVE-2026-33116) vulnerability in dotnet-sdk (CVE-2026-33116). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.	High	C# Cwe 20 Cwe 400 Cwe 835 +22	4 months ago
CVE-2026-32226	Vulnerability in csharp (CVE-2026-32226) vulnerability in csharp (CVE-2026-32226). Risk of unauthorized operations or information disclosure.	Medium	C# Cwe 362 Microsoft Net Framework +6	4 months ago
CVE-2024-29059 KEV	[KEV] Vulnerability in Microsoft net-framework (CVE-2024-29059) vulnerability in Microsoft net-framework (CVE-2024-29059). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Net Framework Cwe 209	1 year ago
CVE-2023-36899	ASP.NET Elevation of Privilege Vulnerability ASP.NET Elevation of Privilege Vulnerability	High	C# Cwe 20 Microsoft Net Framework +9	3 years ago
CVE-2023-36873	.NET Framework Spoofing Vulnerability .NET Framework Spoofing Vulnerability	High	C# Cwe 20 Microsoft Net Framework +11	3 years ago
CVE-2023-21808	.NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability	High	C# Remote Code Execution Cwe 416 Microsoft +25	3 years ago
CVE-2023-21722	.NET Framework Denial of Service Vulnerability .NET Framework Denial of Service Vulnerability	Medium	C# Denial of Service Cwe 59 Microsoft +22	3 years ago
CVE-2022-41064	.NET Framework Information Disclosure Vulnerability .NET Framework Information Disclosure Vulnerability	Medium	C# Microsoft Net Framework Windows Server 2022 +10	3 years ago
CVE-2020-1147 KEV	[KEV] Vulnerability in Microsoft net-framework (CVE-2020-1147) vulnerability in Microsoft net-framework (CVE-2020-1147). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Net Framework Sharepoint Visual Studio	4 years ago
CVE-2020-0646 KEV	[KEV] Vulnerability in Microsoft net-framework (CVE-2020-0646) vulnerability in Microsoft net-framework (CVE-2020-0646). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Net Framework Cwe 91	4 years ago
CVE-2017-8759 KEV	[KEV] Vulnerability in Microsoft net-framework (CVE-2017-8759) vulnerability in Microsoft net-framework (CVE-2017-8759). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Net Framework Cwe 20	4 years ago
CVE-2020-1108	Vulnerability in csharp (CVE-2020-1108) vulnerability in csharp (CVE-2020-1108). Risk of unauthorized operations or information disclosure.	High	C# Denial of Service Microsoft Net +14	6 years ago
CVE-2020-1066	Privilege Escalation in csharp (CVE-2020-1066) vulnerability in csharp (CVE-2020-1066). Successful exploitation can lead to full system takeover.	High	C# Microsoft Net Framework Windows Server 2008 +1	6 years ago
CVE-2017-8585	Vulnerability in csharp (CVE-2017-8585) vulnerability in csharp (CVE-2017-8585). Risk of unauthorized operations or information disclosure.	High	C# Denial of Service Cwe 20 Microsoft +1	9 years ago
CVE-2017-0248	Vulnerability in csharp (CVE-2017-0248) vulnerability in csharp (CVE-2017-0248). Data can be tampered with by attackers.	High	C# Cwe 295 Microsoft Net Framework	9 years ago
CVE-2017-0160	Vulnerability in csharp (CVE-2017-0160) vulnerability in csharp (CVE-2017-0160). Successful exploitation can lead to full system takeover.	High	C# Remote Code Execution Microsoft Net Framework	9 years ago

Vulnerabilities

🍪 About cookies