CVE Intelligence

Microsoft Microsoft .NET Framework 3.5 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Microsoft .NET Framework 3.5: 41 record(s), with affected versions and fixes.

CVE-2026-50646 High · 7.8 CWE-502 Jul 14, 2026
.NET Framework Remote Code Execution Vulnerability
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
CVE-2026-50527 High · 7.5 CWE-121 Jul 14, 2026
.NET Framework Denial of Service Vulnerability
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50525 High · 7.5 CWE-770 Jul 14, 2026
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-47304 Critical · 9.8 CWE-345 Jul 14, 2026
.NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-47302 High · 7.5 CWE-770 Jul 14, 2026
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50653 High · 7.5 CWE-400 Jul 14, 2026
Azure Active Directory Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVE-2026-50652 High · 7.5 CWE-502 Jul 14, 2026
Azure Active Directory Denial of Service Vulnerability
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVE-2026-35433 High · 7.3 CWE-20 May 12, 2026
.NET Elevation of Privilege Vulnerability
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32177 High · 7.3 CWE-20 May 12, 2026
.NET Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-33116 High · 7.5 CWE-20 Apr 14, 2026
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
CVE-2026-32226 Medium · 5.9 CWE-362 Apr 14, 2026
.NET Framework Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-23666 High · 7.5 CWE-755 Apr 14, 2026
.NET Framework Denial of Service Vulnerability
Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2025-55248 Medium · 5.7 CWE-326 Oct 14, 2025
.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
CVE-2024-29059 High · 7.5 KEV High · 69 Public exploit CWE-209 Mar 22, 2024
Microsoft .NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability
CVE-2020-1147 High · 7.8 KEV Urgent · 76 Public exploit Jul 14, 2020
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
CVE-2020-0646 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-91 Jan 14, 2020
Microsoft .NET Framework Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.