Microsoft Microsoft .NET Framework 3.5
76 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-97801 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Framework Tampering Vulnerability | HIGH 7.5 | 0.7 % | ||
| CVE-2026-58280 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-97788 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | Active Directory Federation Services (AD FS) Information Disclosure Vulnerability | HIGH 7.5 | 0.9 % | ||
| CVE-2026-96960 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-96959 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2026-96958 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-96233 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2026-85363 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Framework Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-84008 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2026-83520 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 1.4 % | ||
| CVE-2026-70035 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Framework Remote Code Execution Vulnerability | HIGH 8.8 | 1.4 % | ||
| CVE-2026-70007 | 3.5.0 – < 2.0.50727.8987 AND 3.0.30729.8982 | .NET Framework Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-96224 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-96222 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | HIGH 7.4 | 0.6 % | ||
| CVE-2026-70174 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-69651 | 3.5.0 – < 2.0.50727.9188 AND 3.0.30729.9171 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-70354 | 3.5.0 – < 2.0.50727.8984 & 3.0.30729.8980 | .NET Core Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2026-65810 | 3.5.0 – < 2.0.50727.9183 & 3.0.30729.9169 | .NET Framework Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2026-62886 | 3.5.0 – < 2.0.50727.8987 AND 3.0.30729.8982 | .NET Elevation of Privilege Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2026-62872 | 3.5.0 – < 2.0.50727.9183 & 3.0.30729.9169 | .NET Framework Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-62897 | 3.5.0 – < 2.0.50727.9183 & 3.0.30729.9169 | .NET Framework Remote Code Execution Vulnerability | HIGH 7.0 | 0.4 % | ||
| CVE-2026-50659 | 3.5.0 – < 2.0.50727.8983 & 3.0.30729.8978 | .NET Spoofing Vulnerability | MEDIUM 6.5 | 0.7 % | ||
| CVE-2026-50650 | 3.5.0 – < 2.0.50727.8983 & 3.0.30729.8978 | .NET Framework Elevation of Privilege Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2026-50649 | 3.5.0 – < 2.0.50727.9182 & 3.0.30729.9168 | .NET Remote Code Execution Vulnerability | HIGH 7.8 | 4.0 % | ||
| CVE-2026-50648 | 3.5.0 – < 2.0.50727.8983 & 3.0.30729.8978 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50646 | 3.5.0 – < 2.0.50727.8983 & 3.0.30729.8978 | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 4.0 % | ||
| CVE-2026-50527 | 3.5.0 – < 2.0.50727.8983 & 3.0.30729.8978 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50525 | 3.5.0 – < 2.0.50727.9182 & 3.0.30729.9168 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-47304 | 3.5.0 – < 2.0.50727.8983 & 3.0.30729.8978 | .NET Security Feature Bypass Vulnerability | CRITICAL 9.8 | 0.3 % | ||
| CVE-2026-47302 | 3.5.0 – < 2.0.50727.8983 & 3.0.30729.8978 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50653 | 3.5.0 – < 2.0.50727.9182 & 3.0.30729.9168 | Azure Active Directory Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50652 | 3.5.0 – < 2.0.50727.9182 & 3.0.30729.9168 | Azure Active Directory Denial of Service Vulnerability | HIGH 7.5 | 1.7 % | ||
| CVE-2026-35433 | 3.5.0 – < 4.8.9334.0 and 4.8.4802.0 | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 0.8 % | ||
| CVE-2026-32177 | 3.5.0 – < 4.8.9334.0 and 4.8.4802.0 | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 0.6 % | ||
| CVE-2026-23666 | 3.5.0 – < 2.0.50727.8982 & 3.0.30729.8976 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-33116 | 3.5.0 – < 2.0.50727.8982 & 3.0.30729.8976 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.1 % | ||
| CVE-2026-32226 | 3.5.0 – < 2.0.50727.8982 & 3.0.30729.8976 | .NET Framework Denial of Service Vulnerability | MEDIUM 5.9 | 0.5 % | ||
| CVE-2025-55248 | 3.5.0 – < 2.0.50727.8981 | .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.7 | 0.7 % | ||
| CVE-2024-43484 | 3.5.0 – < 3.5.30729.8973 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.0 % | ||
| CVE-2024-43483 | 3.5.0 – < 3.5.30729.8973 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.9 % | ||
| CVE-2024-38081 | | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 1.3 % | ||
| CVE-2024-29059 | | .NET Framework Information Disclosure Vulnerability | HIGH 7.5 | 99 % | KEV | |
| CVE-2024-21312 | | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 3.6 % | ||
| CVE-2023-36049 | | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | CRITICAL 9.8 | 6.8 % | ||
| CVE-2023-36560 | | ASP.NET Security Feature Bypass Vulnerability | HIGH 8.8 | 2.9 % | ||
| CVE-2023-36788 | | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2023-36793 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36792 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36796 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36794 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-32030 | | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.2 % | ||
| CVE-2023-29331 | | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.6 % | ||
| CVE-2023-24936 | | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.5 | 1.6 % | ||
| CVE-2023-24895 | | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.1 % | ||
| CVE-2023-29326 | | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2023-21722 | 3.5.0 – < 3.5.50727.8966 | .NET Framework Denial of Service Vulnerability | MEDIUM 5.0 | 0.9 % | ||
| CVE-2022-41089 | | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2022-26832 | | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 3.6 % | ||
| CVE-2022-21911 | | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 3.1 % | ||
| CVE-2020-16937 | | .NET Framework Information Disclosure Vulnerability | MEDIUM 5.5 | 3.3 % | ||
| CVE-2020-1476 | | ASP.NET and .NET Elevation of Privilege Vulnerability | MEDIUM 5.5 | 1.1 % | ||
| CVE-2020-1046 | 3.5.0 – < publication | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 3.8 % | ||
| CVE-2020-1108 | | .NET Core & .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 6.5 % | ||
| CVE-2020-0646 | | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote | CRITICAL 9.8 | 99 % | KEV | |
| CVE-2020-0606 | | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 17 % | ||
| CVE-2020-0605 | | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 17 % | ||
| CVE-2019-1142 | | An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locat | MEDIUM 5.5 | 1.0 % | ||
| CVE-2019-1113 | | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 10.0 % | ||
| CVE-2019-1083 | | A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of S | HIGH 7.5 | 7.8 % | ||
| CVE-2019-1006 | | An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing sign | HIGH 7.5 | 6.1 % | ||
| CVE-2019-0981 | | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core | HIGH 7.5 | 4.9 % | ||
| CVE-2019-0980 | | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core | HIGH 7.5 | 4.9 % | ||
| CVE-2019-0864 | | A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Servic | MEDIUM 5.5 | 1.4 % | ||
| CVE-2019-0820 | | A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Co | HIGH 7.5 | 5.7 % | ||
| CVE-2019-0657 | | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio | MEDIUM 5.9 | 4.5 % | ||
| CVE-2019-0613 | | A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup | HIGH 8.8 | 15 % |