What’s Vulnerable › Products

Microsoft .NET 9.0 vulnerabilities

29 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 23 published in the last 12 months.

Check whether your Microsoft .NET 9.0 version is affected

Latest Microsoft .NET 9.0 vulnerabilities

• CVE-2026-45591 — ASP.NET Core Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-45491 — .NET Tampering Vulnerability (CVSS 5.5)
• CVE-2026-45490 — .NET SDK Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-42899 — ASP.NET Core Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-32175 — .NET Core Tampering Vulnerability (CVSS 4.3)
• CVE-2026-35433 — .NET Elevation of Privilege Vulnerability (CVSS 7.3)
• CVE-2026-32177 — .NET Elevation of Privilege Vulnerability (CVSS 7.3)
• CVE-2026-32203 — .NET and Visual Studio Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-26171 — .NET Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-33116 — .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-32178 — .NET Spoofing Vulnerability (CVSS 7.5)
• CVE-2026-26127 — .NET Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-21218 — .NET Spoofing Vulnerability (CVSS 7.5)
• CVE-2025-55248 — .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability (CVSS 5.7)
• CVE-2025-55247 — .NET Elevation of Privilege Vulnerability (CVSS 7.3)
• CVE-2025-30399 — .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2025-26646 — .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability (CVSS 8.0)
• CVE-2025-21172 — .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2025-21173 — .NET Elevation of Privilege Vulnerability (CVSS 7.3)
• CVE-2025-21176 — .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2025-21171 — .NET Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2024-43498 — .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2024-43499 — .NET and Visual Studio Denial of Service Vulnerability (CVSS 7.5)