Microsoft Microsoft .NET Framework 4.8 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft .NET Framework 4.8: 27 record(s), with affected versions and fixes.
CVE-2026-97801
High · 7.5
CWE-1287 Oct 13, 2026
.NET Framework Tampering Vulnerability
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.
CVE-2026-97788
High · 7.5
CWE-203 Oct 13, 2026
Active Directory Federation Services (AD FS) Information Disclosure Vulnerability
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
CVE-2026-96960
High · 7.5
CWE-405 Oct 13, 2026
.NET Denial of Service Vulnerability
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96959
High · 7.5
CWE-770 Oct 13, 2026
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96958
High · 7.5
CWE-407 Oct 13, 2026
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96233
High · 7.5
CWE-787 Oct 13, 2026
ASP.NET Core Denial of Service Vulnerability
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-96224
High · 8.8
CWE-787 Oct 13, 2026
.NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-96222
High · 7.4
CWE-295 Oct 13, 2026
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-85363
High · 8.8
CWE-190 Oct 13, 2026
.NET Framework Elevation of Privilege Vulnerability
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-84008
High · 7.5
CWE-407 Oct 13, 2026
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-83520
High · 8.8
CWE-502 Oct 13, 2026
.NET Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70174
High · 8.8
CWE-358 Oct 13, 2026
.NET Remote Code Execution Vulnerability
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70035
High · 8.8
CWE-502 Oct 13, 2026
.NET Framework Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
CVE-2026-70007
High · 8.8
CWE-787 Oct 13, 2026
.NET Framework Remote Code Execution Vulnerability
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
CVE-2026-69651
High · 7.5
CWE-407 Oct 13, 2026
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-58280
High · 7.5
CWE-674 Oct 13, 2026
.NET Denial of Service Vulnerability
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-108398
High · 8.8
CWE-426 Oct 13, 2026
.NET Framework Security Feature Bypass Vulnerability
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.
CVE-2026-102869
High · 8.8
CWE-843 Oct 13, 2026
.NET and Visual Studio Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69522
High · 8.8
CWE-122 Sep 8, 2026
.NET and Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-50659
Medium · 6.5
CWE-116 Jul 14, 2026
.NET Spoofing Vulnerability
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
CVE-2026-35433
High · 7.3
CWE-20 May 12, 2026
.NET Elevation of Privilege Vulnerability
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32177
High · 7.3
CWE-20 May 12, 2026
.NET Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-33116
High · 7.5
CWE-20 Apr 14, 2026
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
CVE-2026-32226
Medium · 5.9
CWE-362 Apr 14, 2026
.NET Framework Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-23666
High · 7.5
CWE-755 Apr 14, 2026
.NET Framework Denial of Service Vulnerability
Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.