What’s Vulnerable › Products

Microsoft .NET Framework vulnerabilities

207 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 31 published in the last 12 months.

Check whether your Microsoft .NET Framework version is affected

Exploited Microsoft .NET Framework vulnerabilities

• CVE-2024-29059 — Microsoft .NET Framework Information Disclosure Vulnerability
• CVE-2015-1671 — Microsoft Windows Remote Code Execution Vulnerability
• CVE-2020-1147 — Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
• CVE-2020-0646 — Microsoft .NET Framework Remote Code Execution Vulnerability
• CVE-2017-8759 — Microsoft .NET Framework Remote Code Execution Vulnerability

Latest Microsoft .NET Framework vulnerabilities

• CVE-2026-97788 — Active Directory Federation Services (AD FS) Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2026-96960 — .NET Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-96959 — .NET Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-96958 — .NET Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-96222 — Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVSS 7.4)
• CVE-2026-70354 — .NET Core Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2026-65810 — .NET Framework Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-62897 — .NET Framework Remote Code Execution Vulnerability (CVSS 7.0)
• CVE-2026-62872 — .NET Framework Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-50659 — .NET Spoofing Vulnerability (CVSS 6.5)
• CVE-2026-50650 — .NET Framework Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-50649 — .NET Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2026-50648 — .NET Framework Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-50646 — .NET Framework Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2026-50527 — .NET Framework Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-50525 — .NET Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-47304 — .NET Security Feature Bypass Vulnerability (CVSS 9.8)
• CVE-2026-47302 — .NET Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-50647 — Active Directory Federation Server Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-50411 — Windows Active Directory Federation Services Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-50368 — Windows Active Directory Federation Services Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-50355 — Windows Active Directory Federation Services Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-50653 — Azure Active Directory Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-50652 — Azure Active Directory Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-35433 — .NET Elevation of Privilege Vulnerability (CVSS 7.3)