Microsoft Microsoft .NET Framework 4.8 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft .NET Framework 4.8: 47 record(s), with affected versions and fixes.
CVE-2026-50659
Medium · 6.5
CWE-116 Jul 14, 2026
.NET Spoofing Vulnerability
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
CVE-2026-50648
High · 7.5
CWE-770 Jul 14, 2026
.NET Framework Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50646
High · 7.8
CWE-502 Jul 14, 2026
.NET Framework Remote Code Execution Vulnerability
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
CVE-2026-50527
High · 7.5
CWE-121 Jul 14, 2026
.NET Framework Denial of Service Vulnerability
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50525
High · 7.5
CWE-770 Jul 14, 2026
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-47304
Critical · 9.8
CWE-345 Jul 14, 2026
.NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-47302
High · 7.5
CWE-770 Jul 14, 2026
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50647
High · 7.5
CWE-835 Jul 14, 2026
Active Directory Federation Server Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVE-2026-50411
High · 7.5
CWE-121 Jul 14, 2026
Windows Active Directory Federation Services Denial of Service Vulnerability
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVE-2026-50368
High · 7.5
CWE-121 Jul 14, 2026
Windows Active Directory Federation Services Denial of Service Vulnerability
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
CVE-2026-50355
High · 7.5
CWE-121 Jul 14, 2026
Windows Active Directory Federation Services Denial of Service Vulnerability
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
CVE-2026-50324
Medium · 5.9
CWE-835 Jul 14, 2026
Windows Active Directory Federation Services Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVE-2026-50304
High · 7.5
CWE-121 Jul 14, 2026
Windows Active Directory Federation Services Denial of Service Vulnerability
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
CVE-2026-50653
High · 7.5
CWE-400 Jul 14, 2026
Azure Active Directory Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVE-2026-50652
High · 7.5
CWE-502 Jul 14, 2026
Azure Active Directory Denial of Service Vulnerability
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVE-2026-35433
High · 7.3
CWE-20 May 12, 2026
.NET Elevation of Privilege Vulnerability
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32177
High · 7.3
CWE-20 May 12, 2026
.NET Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-33116
High · 7.5
CWE-20 Apr 14, 2026
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
CVE-2026-32226
Medium · 5.9
CWE-362 Apr 14, 2026
.NET Framework Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-23666
High · 7.5
CWE-755 Apr 14, 2026
.NET Framework Denial of Service Vulnerability
Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2025-55248
Medium · 5.7
CWE-326 Oct 14, 2025
.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
CVE-2024-29059
High · 7.5
KEV High · 69 Public exploit CWE-209 Mar 22, 2024
Microsoft .NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability