# Microsoft .NET Framework 3.5 AND 4.7.2.

Every CVE that names Microsoft .NET Framework 3.5 AND 4.7.2 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [.NET Framework Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-97801.md)
  `CVE-2026-97801` · CVE record: Microsoft Microsoft .NET Framework 3.5 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-1287
- [.NET and Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102869.md)
  `CVE-2026-102869` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Active Directory Federation Services (AD FS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97788.md)
  `CVE-2026-97788` · CVE record: Microsoft Microsoft .NET Framework 3.5 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [.NET Framework Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-108398.md)
  `CVE-2026-108398` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-426
- [.NET Framework Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-65810.md)
  `CVE-2026-65810` · CVE record: Microsoft Microsoft .NET Framework 3.5 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Path traversal
- [.NET Framework Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62872.md)
  `CVE-2026-62872` · CVE record: Microsoft Microsoft .NET Framework 3.5 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Broken access control
- [.NET Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-50649.md)
  `CVE-2026-50649` · CVE record: Microsoft .NET 8.0 runtime and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Insecure deserialization
- [Active Directory Federation Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50647.md)
  `CVE-2026-50647` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Windows Active Directory Federation Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50411.md)
  `CVE-2026-50411` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Federation Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50355.md)
  `CVE-2026-50355` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Federation Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50324.md)
  `CVE-2026-50324` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Windows Active Directory Federation Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50368.md)
  `CVE-2026-50368` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Federation Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50304.md)
  `CVE-2026-50304` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Azure Active Directory Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50653.md)
  `CVE-2026-50653` · CVE record: Microsoft Azure Active Directory and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Azure Active Directory Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50652.md)
  `CVE-2026-50652` · CVE record: Microsoft Azure Active Directory and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Insecure deserialization
- [.NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-32177.md)
  `CVE-2026-32177` · CVE record: Microsoft .NET 10.0 and 4 more · CVSS 7.3 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption, CWE-20
- [.NET Framework Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-23666.md)
  `CVE-2026-23666` · CVE record: Microsoft Microsoft .NET Framework 3.5 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-366, CWE-755
- [.NET Framework Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-32226.md)
  `CVE-2026-32226` · CVE record: Microsoft Microsoft .NET Framework 3.5 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Race condition
- [.NET Framework Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-29059.md)
  `CVE-2024-29059` · CVE record: Microsoft Microsoft .NET Framework 4.8 and 4 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.99 · Not analysed yet · Published 22 Mar 2024 · Tags: Information disclosure
- [.NET Framework Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-21312.md)
  `CVE-2024-21312` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-20
- [ASP.NET Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2023-36560.md)
  `CVE-2023-36560` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Nov 2023
- [.NET Framework Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36788.md)
  `CVE-2023-36788` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Sept 2023
- [ASP.NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36899.md)
  `CVE-2023-36899` · CVE record: Microsoft Microsoft .NET Framework 2.0 Service Pack 2 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.77 · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-20
- [.NET Framework Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-36873.md)
  `CVE-2023-36873` · CVE record: Microsoft Microsoft .NET Framework 3.5 and 4.6.2 and 4 more · CVSS 7.4 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-20
- [.NET and Visual Studio Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-32030.md)
  `CVE-2023-32030` · CVE record: Microsoft Microsoft .NET Framework 4.8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jun 2023
- [.NET Framework Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-29326.md)
  `CVE-2023-29326` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jun 2023
- [.NET Framework Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-21722.md)
  `CVE-2023-21722` · CVE record: Microsoft Microsoft .NET Framework 2.0 Service Pack 2 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 14 Feb 2023 · Tags: Path traversal
- [.NET Framework Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-26832.md)
  `CVE-2022-26832` · CVE record: Microsoft Microsoft .NET Framework 3.5 AND 4.8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Apr 2022
- [.NET Framework Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-21911.md)
  `CVE-2022-21911` · CVE record: Microsoft Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jan 2022
- [.NET Framework Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2020-16937.md)
  `CVE-2020-16937` · CVE record: Microsoft Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 16 Oct 2020
- [ASP.NET and .NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2020-1476.md)
  `CVE-2020-1476` · CVE record: Microsoft Microsoft .NET Framework 4.8 and 4 more · No CVSS score · Not analysed yet · Published 17 Aug 2020
- [.NET Framework Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-1046.md)
  `CVE-2020-1046` · CVE record: Microsoft Microsoft .NET Framework 3.5 and 4 more · No CVSS score · Not analysed yet · Published 17 Aug 2020

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-net-framework-3-5-and-4-7-2>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-net-framework-3-5-and-4-7-2/>. Everything for agents: <https://agentprime.io/llms.txt>.