.net Security Vulnerabilities and Issues — .net CVE List

Lucene search

Microsoft.net

74 matches found

CVE•added 2023/10/10 2:15 p.m.•4406 views

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

7.5CVSS8AI score0.94434EPSS

CVE•added 2025/01/14 6:15 p.m.•1064 views

CVE-2025-21176

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

8.8CVSS9AI score0.00528EPSS

CVE•added 2023/08/08 7:15 p.m.•707 views

CVE-2023-38180

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.8AI score0.00133EPSS

CVE•added 2024/01/09 6:15 p.m.•576 views

CVE-2024-0056

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

8.7CVSS9.1AI score0.00346EPSS

CVE•added 2024/01/09 6:15 p.m.•532 views

CVE-2024-0057

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

9.8CVSS9.3AI score0.02349EPSS

CVE•added 2023/09/12 5:15 p.m.•497 views

CVE-2023-36799

.NET Core and Visual Studio Denial of Service Vulnerability

6.5CVSS6.9AI score0.00786EPSS

CVE•added 2023/09/12 5:15 p.m.•487 views

CVE-2023-36792

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01289EPSS

CVE•added 2023/09/12 5:15 p.m.•483 views

CVE-2023-36793

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01537EPSS

CVE•added 2023/09/12 5:15 p.m.•477 views

CVE-2023-36794

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00994EPSS

CVE•added 2023/09/12 5:15 p.m.•470 views

CVE-2023-36796

Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01EPSS

CVE•added 2023/04/11 9:15 p.m.•465 views

CVE-2023-28260

.NET DLL Hijacking Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02283EPSS

CVE•added 2020/09/15 10:15 a.m.•418 views

CVE-2020-8927

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli libr...

6.5CVSS6.6AI score0.00388EPSS

CVE•added 2023/10/10 6:15 p.m.•408 views

CVE-2023-38171

Microsoft QUIC Denial of Service Vulnerability

7.5CVSS7.4AI score0.05105EPSS

CVE•added 2021/02/25 11:15 p.m.•400 views

CVE-2021-26701

.NET Core Remote Code Execution Vulnerability

9.8CVSS8.5AI score0.01745EPSS

CVE•added 2023/10/10 6:15 p.m.•392 views

CVE-2023-36435

Microsoft QUIC Denial of Service Vulnerability

7.5CVSS7.4AI score0.01201EPSS

CVE•added 2025/01/14 6:15 p.m.•386 views

CVE-2025-21172

.NET and Visual Studio Remote Code Execution Vulnerability

7.5CVSS7.8AI score0.00174EPSS

CVE•added 2024/01/09 7:15 p.m.•356 views

CVE-2024-21319

Microsoft Identity Denial of service vulnerability

6.8CVSS6.6AI score0.00322EPSS

CVE•added 2022/03/09 5:15 p.m.•336 views

CVE-2022-24512

.NET and Visual Studio Remote Code Execution Vulnerability

6.8CVSS7.2AI score0.0021EPSS

CVE•added 2024/07/09 5:15 p.m.•335 views

CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.6AI score0.01239EPSS

CVE•added 2022/05/10 9:15 p.m.•299 views

CVE-2022-23267

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.5AI score0.01762EPSS

CVE•added 2022/05/10 9:15 p.m.•281 views

CVE-2022-29117

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.5AI score0.01512EPSS

CVE•added 2025/01/14 6:15 p.m.•276 views

CVE-2025-21173

.NET Elevation of Privilege Vulnerability

7.3CVSS7.2AI score0.02084EPSS

CVE•added 2021/02/25 11:15 p.m.•275 views

CVE-2021-24112

.NET Core Remote Code Execution Vulnerability

9.8CVSS9.1AI score0.00755EPSS

CVE•added 2022/05/10 9:15 p.m.•255 views

CVE-2022-29145

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.5AI score0.01659EPSS

CVE•added 2025/01/14 6:15 p.m.•253 views

CVE-2025-21171

.NET Remote Code Execution Vulnerability

7.5CVSS7.8AI score0.00159EPSS

CVE•added 2024/07/09 5:15 p.m.•251 views

CVE-2024-38095

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS6.4AI score0.01535EPSS

CVE•added 2024/03/12 5:15 p.m.•248 views

CVE-2024-21392

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.7AI score0.00544EPSS

CVE•added 2022/03/09 5:15 p.m.•244 views

CVE-2022-24464

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.5AI score0.01236EPSS

CVE•added 2024/11/12 6:15 p.m.•240 views

CVE-2024-43498

.NET and Visual Studio Remote Code Execution Vulnerability

9.8CVSS9.4AI score0.01044EPSS

CVE•added 2024/03/12 5:15 p.m.•233 views

CVE-2024-26190

Microsoft QUIC Denial of Service Vulnerability

7.5CVSS7.4AI score0.00612EPSS

CVE•added 2023/11/14 9:15 p.m.•232 views

CVE-2023-36049

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

9.8CVSS8.7AI score0.03285EPSS

CVE•added 2023/02/14 9:15 p.m.•231 views

CVE-2023-21808

.NET and Visual Studio Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.0141EPSS

CVE•added 2024/11/12 6:15 p.m.•217 views

CVE-2024-43499

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.5AI score0.00856EPSS

CVE•added 2024/04/09 5:15 p.m.•216 views

CVE-2024-21409

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

7.3CVSS7.5AI score0.48268EPSS

CVE•added 2020/05/21 11:15 p.m.•214 views

CVE-2020-1108

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.

7.5CVSS7.3AI score0.02352EPSS

CVE•added 2023/11/14 10:15 p.m.•214 views

CVE-2023-36558

ASP.NET Core Security Feature Bypass Vulnerability

6.2CVSS7.5AI score0.00316EPSS

CVE•added 2022/06/15 10:15 p.m.•213 views

CVE-2022-30184

.NET and Visual Studio Information Disclosure Vulnerability

5.5CVSS5.3AI score0.00512EPSS

CVE•added 2023/01/10 10:15 p.m.•201 views

CVE-2023-21538

.NET Denial of Service Vulnerability