Microsoft Microsoft .NET Framework 3.5 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft .NET Framework 3.5: 41 record(s), with affected versions and fixes.
CVE-2026-50646
High · 7.8
CWE-502 Jul 14, 2026
.NET Framework Remote Code Execution Vulnerability
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
CVE-2026-50527
High · 7.5
CWE-121 Jul 14, 2026
.NET Framework Denial of Service Vulnerability
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50525
High · 7.5
CWE-770 Jul 14, 2026
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-47304
Critical · 9.8
CWE-345 Jul 14, 2026
.NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-47302
High · 7.5
CWE-770 Jul 14, 2026
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50653
High · 7.5
CWE-400 Jul 14, 2026
Azure Active Directory Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVE-2026-50652
High · 7.5
CWE-502 Jul 14, 2026
Azure Active Directory Denial of Service Vulnerability
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVE-2026-35433
High · 7.3
CWE-20 May 12, 2026
.NET Elevation of Privilege Vulnerability
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32177
High · 7.3
CWE-20 May 12, 2026
.NET Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-33116
High · 7.5
CWE-20 Apr 14, 2026
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
CVE-2026-32226
Medium · 5.9
CWE-362 Apr 14, 2026
.NET Framework Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-23666
High · 7.5
CWE-755 Apr 14, 2026
.NET Framework Denial of Service Vulnerability
Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2025-55248
Medium · 5.7
CWE-326 Oct 14, 2025
.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
CVE-2024-29059
High · 7.5
KEV High · 69 Public exploit CWE-209 Mar 22, 2024
Microsoft .NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability
CVE-2020-1147
High · 7.8
KEV Urgent · 76 Public exploit Jul 14, 2020
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
CVE-2020-0646
Critical · 9.8
KEV Urgent · 83 Public exploit CWE-91 Jan 14, 2020
Microsoft .NET Framework Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.