Skip to contentMicrosoft .net vulnerabilities
- microsoft .net framework, .net framework 3.5, .net framework 3.5 and 4.7.2 on windows 10 version 1809 for 32-bit systems +30 more +32 moreAn elevation of privilege vulnerability exists when the .NET Framework common language runtime ...CVE-2019-11425.5 Medium
- microsoft active directory authentication library, adal.net, nuget +1 more +3 moreAzure Active Directory Authentication Library Elevation of Privilege VulnerabilityCVE-2019-1258Fix available8.8 High
- microsoft .net framework, .net framework 2.0, .net framework 3.0 +42 more +44 moreA remote code execution vulnerability exists in .NET software when the software fails to check...CVE-2019-11138.8 High
- microsoft .net framework, .net framework 2.0, .net framework 3.0 +39 more +41 moreA denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly...CVE-2019-1083Public exploit7.5 High
- microsoft asp.net coreOpen redirect in ASP.NET CoreCVE-2019-1075Fix available6.1 Medium
- microsoft windows, .net framework, identitymodel +58 more +60 moreAn authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and...CVE-2019-1006Public exploit7.5 High
- microsoft asp.net coreDenial of service in ASP.NET CoreCVE-2019-0982Fix available7.5 High
- microsoft .net core, .net framework, .net framework 2.0 +45 more +47 moreDenial of service in ASP.NET CoreCVE-2019-0981Fix available7.5 High
- microsoft .net core, .net framework, .net framework 2.0 +45 more +47 moreDenial of service in ASP.NET CoreCVE-2019-0980Fix available7.5 High
- microsoft .net framework, .net framework 2.0, .net framework 3.0 +44 more +46 moreA denial of service vulnerability exists when .NET Framework improperly handles objects in heap...CVE-2019-08645.5 Medium
- microsoft .net core, .net framework, .net framework 2.0 +44 more +46 moreRegular Expression Denial of Service in System.Text.RegularExpressionsCVE-2019-0820Fix available7.5 High
- microsoft .net framework, rapidflows rapid4 +1 moreGetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 (when used with .NET...CVE-2019-113976.5 Medium
- microsoft asp.net coreA denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ...CVE-2019-08157.5 High
- microsoft nuget, .net core sdk, visual studio +6 more +8 moreA tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow...CVE-2019-0757Fix available6.5 Medium
- microsoft .net framework, visual studio, .net core +14 more +16 moreImproper Input Validation in .Net Framework API'sCVE-2019-0657Fix available5.9 Medium
- microsoft .net framework, visual studio, .net framework 2.0 +12 more +14 moreA remote code execution vulnerability exists in .NET Framework and Visual Studio software when...CVE-2019-0613EPSS 15.4%8.8 High
- microsoft asp.net coreDenial of service in ASP.NET CoreCVE-2019-0564Fix available7.5 High
- microsoft asp.net coreA denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ...CVE-2019-05487.5 High
- microsoft .net core, .net framework +1 moreExposure of Sensitive Information in System.Net.HttpCVE-2019-0545Fix available7.5 High
- microsoft .net frameworkA remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate...CVE-2018-8540EPSS 21.6%9.8 Critical
- microsoft .net frameworkA denial of service vulnerability exists when .NET Framework improperly handles special web...CVE-2018-85177.5 High
- microsoft .net core, asp.net core +1 moreTampering vulnerability in .NET CoreCVE-2018-8416Fix available6.5 Medium
- microsoft .net core, powershell core, asp.net core +2 more.NET Core Information DisclosureCVE-2018-8292Fix availableEPSS 14.8%7.5 High
- microsoft .net frameworkA remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted...CVE-2018-8421EPSS 29.1%9.8 Critical
- microsoft .net core, asp.net core, system.io.pipelines +2 moreDenial of service vulnerability exists when System.IO.Pipelines improperly handles requestsCVE-2018-8409Fix available7.5 High
- microsoft .net frameworkAn information disclosure vulnerability exists in Microsoft .NET Framework that could allow an...CVE-2018-83607.5 High
- microsoft .net core, .net framework, asp.net core +2 more +4 moreImproper Certificate Validation in Microsoft .NET Framework componentsCVE-2018-8356Fix available5.5 Medium
- microsoft .net framework, project server, sharepoint enterprise server +2 more +4 moreA remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate...CVE-2018-8284Public exploitEPSS 46.0%8.1 High
- microsoft .net frameworkA Remote Code Execution vulnerability exists in .NET software when the software fails to check...CVE-2018-8260EPSS 16.0%8.8 High
- microsoft .net frameworkAn elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to...CVE-2018-82027.8 High
- microsoft asp.net, asp.net core, asp.net mvc 5.2 +2 more +4 moreSecurity feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validatedCVE-2018-8171Fix availableEPSS 10.8%7.5 High
- microsoft .net frameworkA security feature bypass vulnerability exists in .Net Framework which could allow an attacker to...CVE-2018-10397.8 High
- microsoft .net core, .net framework +1 moreDenial of service vulnerability exists when .NET and .NET Core improperly process XML documentsCVE-2018-0765Fix available7.5 High
- microsoft .net core, powershell core, asp.net core +2 more.NET Core Denial of Service VulnerabilityCVE-2018-0875Fix available7.5 High
- microsoft asp.net coreASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET...CVE-2018-08087.5 High
- microsoft asp.net coreASP.NET Core allow an elevation of privilegeCVE-2018-0787Fix available8.8 High
- microsoft .net core, .net framework, powershell core +1 more +3 moreImproper Certificate Validation in Microsoft .NET Framework componentsCVE-2018-0786Fix available7.5 High
- microsoft asp.net coreASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP...CVE-2018-07856.5 Medium
- microsoft asp.net coreASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET...CVE-2018-07848.8 High
- microsoft .net core, .net framework, powershell core +1 more +3 moreDenial of service vulnerability exists when .NET and .NET Core improperly process XML documentsCVE-2018-0764Fix available7.5 High
- microsoft asp.net coreCross-origin Resource Sharing bypass in ASP.NET CoreCVE-2017-8700Fix availableEPSS 10.4%7.5 High
- microsoft asp.net, aspnetcore +1 moreDenial of service in ASP.NET CoreCVE-2017-11883Fix available7.5 High
- microsoft asp.net coreOpen redirect in ASP.NET CoreCVE-2017-11879Fix available8.8 High
- microsoft .net core, aspnetcore +1 moreImproper Certificate ValidationCVE-2017-11770Fix available7.5 High
- microsoft .net frameworkMicrosoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to...CVE-2017-8759In KEVPublic exploitEPSS 88.7%7.8 High
- microsoft .net framework, microsoft corporation .net framework 4.6, 4.6.1, 4.6.2, and 4.7 +1 moreImproper Input Validation in Microsoft.NETCore.AppCVE-2017-8585Fix available7.5 High
- microsoft asp.net core, asp.net model view controller, microsoft.aspnetcore.mvc.abstractions +16 more +18 moreModerate severity vulnerability that affects Microsoft.AspNetCore.MvcCVE-2017-0256Fix available5.3 Medium
- microsoft asp.net core, asp.net model view controller, microsoft.aspnetcore.mvc.abstractions +16 more +18 moreHigh severity vulnerability that affects Microsoft.AspNetCore.MvcCVE-2017-0249Fix available7.3 High
- microsoft .net frameworkModerate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.CoreCVE-2017-0248Public exploitFix available7.5 High
- microsoft asp.net core, system.text.encodings.web, asp.net model view controller +16 more +18 moreASP.NET Core fails to properly validate web requestsCVE-2017-0247Fix availableEPSS 16.9%7.5 High
- Show moreLoading…