Microsoft Microsoft .NET Framework 3.5 AND 4.8
80 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-97801 | 4.8.0 – < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | .NET Framework Tampering Vulnerability | HIGH 7.5 | 0.7 % | ||
| CVE-2026-102869 | 4.8.0 – < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | .NET and Visual Studio Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-58280 | | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-97788 | 4.8.0 – < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | Active Directory Federation Services (AD FS) Information Disclosure Vulnerability | HIGH 7.5 | 0.9 % | ||
| CVE-2026-96960 | 4.8.0 – < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-96959 | 4.8.0 – < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2026-96958 | 4.8.0 – < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-96233 | | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2026-85363 | | .NET Framework Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-84008 | 4.8.0 – < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2026-83520 | | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 1.4 % | ||
| CVE-2026-70035 | | .NET Framework Remote Code Execution Vulnerability | HIGH 8.8 | 1.4 % | ||
| CVE-2026-70007 | | .NET Framework Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-96224 | | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-96222 | 4.8.0 – < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | HIGH 7.4 | 0.6 % | ||
| CVE-2026-70174 | | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-69651 | | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-108398 | 4.8.0 – < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | .NET Framework Security Feature Bypass Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-69522 | | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-70354 | | .NET Core Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2026-65810 | 4.8.0 – < 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0 | .NET Framework Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2026-62886 | 4.8.0 – < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | .NET Elevation of Privilege Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2026-62872 | 4.8.0 – < 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0 | .NET Framework Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-62897 | | .NET Framework Remote Code Execution Vulnerability | HIGH 7.0 | 0.4 % | ||
| CVE-2026-50659 | | .NET Spoofing Vulnerability | MEDIUM 6.5 | 0.7 % | ||
| CVE-2026-50650 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | .NET Framework Elevation of Privilege Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2026-50649 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | .NET Remote Code Execution Vulnerability | HIGH 7.8 | 4.0 % | ||
| CVE-2026-50648 | | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50646 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 4.0 % | ||
| CVE-2026-50527 | | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50525 | | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-47304 | | .NET Security Feature Bypass Vulnerability | CRITICAL 9.8 | 0.3 % | ||
| CVE-2026-47302 | | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50647 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | Active Directory Federation Server Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50411 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | Windows Active Directory Federation Services Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50355 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | Windows Active Directory Federation Services Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50324 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | Windows Active Directory Federation Services Denial of Service Vulnerability | MEDIUM 5.9 | 0.9 % | ||
| CVE-2026-50368 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | Windows Active Directory Federation Services Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50304 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | Windows Active Directory Federation Services Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50653 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | Azure Active Directory Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50652 | 4.8.0 – < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 | Azure Active Directory Denial of Service Vulnerability | HIGH 7.5 | 1.7 % | ||
| CVE-2026-35433 | | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 0.8 % | ||
| CVE-2026-32177 | | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 0.6 % | ||
| CVE-2026-23666 | 4.8.0 – < 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-33116 | | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.1 % | ||
| CVE-2026-32226 | 4.8.0 – < 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0 | .NET Framework Denial of Service Vulnerability | MEDIUM 5.9 | 0.5 % | ||
| CVE-2025-55248 | | .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.7 | 0.7 % | ||
| CVE-2025-21176 | 4.8.0 – < 4.8.04775.01 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-43484 | | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.0 % | ||
| CVE-2024-43483 | | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.9 % | ||
| CVE-2024-38081 | | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 1.3 % | ||
| CVE-2024-21409 | | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.3 | 2.5 % | ||
| CVE-2024-29059 | 4.8.0 – < 4.8.04690.02 | .NET Framework Information Disclosure Vulnerability | HIGH 7.5 | 99 % | KEV | |
| CVE-2024-21312 | 4.8.0 – < 4.8.04690.02 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 3.6 % | ||
| CVE-2024-0057 | | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability | CRITICAL 9.8 | 2.8 % | ||
| CVE-2024-0056 | | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability | HIGH 8.7 | 1.2 % | ||
| CVE-2023-36049 | | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | CRITICAL 9.8 | 6.8 % | ||
| CVE-2023-36560 | 4.8.0 – < 4.8.4682.0 | ASP.NET Security Feature Bypass Vulnerability | HIGH 8.8 | 2.9 % | ||
| CVE-2023-36788 | 4.8.0 – < 4.8.04667.03 | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2023-36793 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36792 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36796 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36794 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36899 | 4.8.0 – < 4.8.04654.06 | ASP.NET Elevation of Privilege Vulnerability | HIGH 8.8 | 77 % | ||
| CVE-2023-36873 | 4.8.0 – < 3.5.4654.08 | .NET Framework Spoofing Vulnerability | HIGH 7.4 | 1.5 % | ||
| CVE-2023-32030 | 4.8.0 – < 4.8.4644.0 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.2 % | ||
| CVE-2023-29331 | | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.6 % | ||
| CVE-2023-24936 | | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.5 | 1.6 % | ||
| CVE-2023-24895 | | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.1 % | ||
| CVE-2023-29326 | 4.8.0 – < 4.8.4644.0 | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2023-24897 | | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-21808 | 4.8.0 – < 10.0.04614.06 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.1 % | ||
| CVE-2023-21722 | | .NET Framework Denial of Service Vulnerability | MEDIUM 5.0 | 0.9 % | ||
| CVE-2022-41089 | | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2022-26832 | 4.8.0 – < 4.8.4494.03 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 3.6 % | ||
| CVE-2022-21911 | 4.8.0 – < 4.8.4465.0 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 3.1 % | ||
| CVE-2020-16937 | 4.8.0 – < publication | .NET Framework Information Disclosure Vulnerability | MEDIUM 5.5 | 3.3 % | ||
| CVE-2020-1476 | 4.8.0 – < publication | ASP.NET and .NET Elevation of Privilege Vulnerability | MEDIUM 5.5 | 1.1 % | ||
| CVE-2020-1046 | 4.8.0 – < publication | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 3.8 % | ||
| CVE-2020-1108 | | .NET Core & .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 6.5 % |