Microsoft Microsoft .NET Framework 4.5.2
18 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-26832 | 4.0.0.0 – < 4.0.52732.36732 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 3.6 % | ||
| CVE-2022-21911 | | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 3.1 % | ||
| CVE-2020-16937 | | .NET Framework Information Disclosure Vulnerability | MEDIUM 5.5 | 3.3 % | ||
| CVE-2020-1476 | 4.0.0.0 – < publication | ASP.NET and .NET Elevation of Privilege Vulnerability | MEDIUM 5.5 | 1.1 % | ||
| CVE-2020-1108 | | .NET Core & .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 6.5 % | ||
| CVE-2020-0646 | | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote | CRITICAL 9.8 | 99 % | KEV | |
| CVE-2020-0606 | | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 17 % | ||
| CVE-2020-0605 | | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 17 % | ||
| CVE-2019-1142 | Windows Server 2012 ; Windows Server 2012 (Server Core installation) ; Windows 8.1 for 32-bit systems ; … | An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locat | MEDIUM 5.5 | 1.0 % | ||
| CVE-2019-1113 | Windows 7 for 32-bit Systems Service Pack 1 ; Windows 7 for x64-based Systems Service Pack 1 ; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) ; … | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 10.0 % | ||
| CVE-2019-1083 | Windows 7 for 32-bit Systems Service Pack 1 ; Windows 7 for x64-based Systems Service Pack 1 ; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) ; … | A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of S | HIGH 7.5 | 7.8 % | ||
| CVE-2019-1006 | Windows 7 for 32-bit Systems Service Pack 1 ; Windows 7 for x64-based Systems Service Pack 1 ; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) ; … | An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing sign | HIGH 7.5 | 6.1 % | ||
| CVE-2019-0981 | Windows 7 for 32-bit Systems Service Pack 1 ; Windows 7 for x64-based Systems Service Pack 1 ; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) ; … | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core | HIGH 7.5 | 4.9 % | ||
| CVE-2019-0980 | Windows 7 for 32-bit Systems Service Pack 1 ; Windows 7 for x64-based Systems Service Pack 1 ; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) ; … | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core | HIGH 7.5 | 4.9 % | ||
| CVE-2019-0864 | Windows 7 for 32-bit Systems Service Pack 1 ; Windows 7 for x64-based Systems Service Pack 1 ; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) ; … | A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Servic | MEDIUM 5.5 | 1.4 % | ||
| CVE-2019-0820 | Windows 7 for 32-bit Systems Service Pack 1 ; Windows 7 for x64-based Systems Service Pack 1 ; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) ; … | A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Co | HIGH 7.5 | 5.7 % | ||
| CVE-2019-0657 | Windows 7 for 32-bit Systems Service Pack 1 ; Windows 7 for x64-based Systems Service Pack 1 ; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) ; … | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio | MEDIUM 5.9 | 4.5 % | ||
| CVE-2019-0613 | Windows 7 for 32-bit Systems Service Pack 1 ; Windows 7 for x64-based Systems Service Pack 1 ; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) ; … | A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup | HIGH 8.8 | 15 % |