Microsoft .net vulnerabilities

CVE-2026-26127 High · 7.5 CWE-125 Mar 10, 2026

.NET Denial of Service Vulnerability

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-21218 High · 7.5 CWE-166 Feb 10, 2026

.NET Spoofing Vulnerability

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-55248 Medium · 5.7 CWE-326 Oct 14, 2025

.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.

CVE-2025-55247 High · 7.3 CWE-59 Oct 14, 2025

.NET Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2023-44487 High · 7.5 KEV Urgent · 73 Public exploit CWE-400 Oct 10, 2023

HTTP/2 Rapid Reset Attack Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2023-38180 High · 7.5 KEV High · 58 CWE-400 Aug 8, 2023

Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

CVE-2022-21986 High · 7.5 Feb 9, 2022

.NET Denial of Service Vulnerability

CVE-2021-34485 Medium · 5.0 CWE-200 Aug 12, 2021

.NET Core and Visual Studio Information Disclosure Vulnerability

CVE-2021-31957 Medium · 5.9 CWE-400 Jun 8, 2021

ASP.NET Core Denial of Service Vulnerability

CVE-2021-31204 High · 7.3 CWE-269 May 11, 2021

.NET and Visual Studio Elevation of Privilege Vulnerability

CVE-2021-24112 High · 8.1 CWE-94 Feb 25, 2021

.NET Core Remote Code Execution Vulnerability