Advisories · Technology
Microsoft .NET Framework 3.5 AND 4.8.
Every CVE that names Microsoft .NET Framework 3.5 AND 4.8 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
.NET Framework Tampering Vulnerability
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- CWE-1287
- CVSS 8.8 High
.NET and Visual Studio Elevation of Privilege Vulnerability
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- Microsoft .NET Framework 3.5 AND 4.7.2
- Memory corruption
- CVSS 7.5 High
Active Directory Federation Services (AD FS) Information Disclosure Vulnerability
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- Information disclosure
- CVSS 8.8 High
.NET Framework Security Feature Bypass Vulnerability
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- Microsoft .NET Framework 3.5 AND 4.7.2
- CWE-426
- CVSS 7.8 High
.NET Framework Elevation of Privilege Vulnerability
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- Path traversal
- CVSS 8.8 High
.NET Framework Elevation of Privilege Vulnerability
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- Broken access control
- CVSS 7.8 High
.NET Remote Code Execution Vulnerability
- Microsoft .NET 8.0 runtime
- Microsoft .NET 9.0 runtime
- Insecure deserialization
- CVSS 7.5 High
Active Directory Federation Server Denial of Service Vulnerability
- Microsoft .NET Framework 3.5 AND 4.7.2
- Microsoft .NET Framework 3.5 AND 4.8
- Denial of service
- CVSS 7.5 High
Windows Active Directory Federation Services Denial of Service Vulnerability
- Microsoft .NET Framework 3.5 AND 4.7.2
- Microsoft .NET Framework 3.5 AND 4.8
- Memory corruption
- CVSS 7.5 High
Windows Active Directory Federation Services Denial of Service Vulnerability
- Microsoft .NET Framework 3.5 AND 4.7.2
- Microsoft .NET Framework 3.5 AND 4.8
- Memory corruption
- CVSS 5.9 Medium
Windows Active Directory Federation Services Denial of Service Vulnerability
- Microsoft .NET Framework 3.5 AND 4.7.2
- Microsoft .NET Framework 3.5 AND 4.8
- Denial of service
- CVSS 7.5 High
Windows Active Directory Federation Services Denial of Service Vulnerability
- Microsoft .NET Framework 3.5 AND 4.7.2
- Microsoft .NET Framework 3.5 AND 4.8
- Memory corruption
- CVSS 7.5 High
Windows Active Directory Federation Services Denial of Service Vulnerability
- Microsoft .NET Framework 3.5 AND 4.7.2
- Microsoft .NET Framework 3.5 AND 4.8
- Memory corruption
- CVSS 7.5 High
Azure Active Directory Denial of Service Vulnerability
- Microsoft Azure Active Directory
- Microsoft .NET Framework 3.5
- Denial of service
- CVSS 7.5 High
Azure Active Directory Denial of Service Vulnerability
- Microsoft Azure Active Directory
- Microsoft .NET Framework 3.5
- Insecure deserialization
- CVSS 7.3 High
.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0
- Microsoft .NET 8.0
- Memory corruption
- CWE-20
- CVSS 7.5 High
.NET Framework Denial of Service Vulnerability
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 AND 4.7.2
- CWE-366
- CWE-755
- CVSS 5.9 Medium
.NET Framework Denial of Service Vulnerability
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 AND 4.7.2
- Race condition
- CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV
.NET Framework Information Disclosure Vulnerability
- Microsoft .NET Framework 4.8
- Microsoft .NET Framework 3.5 AND 4.8
- Information disclosure
- CVSS 7.5 High
.NET Framework Denial of Service Vulnerability
- Microsoft .NET Framework 3.5 AND 4.8.1
- Microsoft .NET Framework 4.8
- CWE-20
- CVSS 8.8 High
ASP.NET Security Feature Bypass Vulnerability
- Microsoft .NET Framework 3.5 AND 4.8.1
- Microsoft .NET Framework 4.8
- CVSS 7.8 High
.NET Framework Remote Code Execution Vulnerability
- Microsoft .NET Framework 3.5 AND 4.8
- Microsoft .NET Framework 3.5 AND 4.7.2
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
ASP.NET Elevation of Privilege Vulnerability
- Microsoft .NET Framework 2.0 Service Pack 2
- Microsoft .NET Framework 3.5 and 4.6.2
- CWE-20
- CVSS 7.4 High
.NET Framework Spoofing Vulnerability
- Microsoft .NET Framework 3.5 and 4.6.2
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- CWE-20
- CVSS 7.5 High
.NET and Visual Studio Denial of Service Vulnerability
- Microsoft .NET Framework 4.8
- Microsoft .NET Framework 3.5 AND 4.8
- CVSS 7.8 High
.NET Framework Remote Code Execution Vulnerability
- Microsoft .NET Framework 3.5 AND 4.8
- Microsoft .NET Framework 3.5 AND 4.7.2
- CVSS 5.0 Medium
.NET Framework Denial of Service Vulnerability
- Microsoft .NET Framework 2.0 Service Pack 2
- Microsoft .NET Framework 3.0 Service Pack 2
- Path traversal
- CVSS 7.5 High
.NET Framework Denial of Service Vulnerability
- Microsoft .NET Framework 3.5 AND 4.8
- Microsoft .NET Framework 4.5.2
- CVSS 7.5 High
.NET Framework Denial of Service Vulnerability
- Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2
- Microsoft .NET Framework 3.5 AND 4.8
- CVSS 4.7 Medium
.NET Framework Information Disclosure Vulnerability
- Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2
- Microsoft .NET Framework 4.8
-
ASP.NET and .NET Elevation of Privilege Vulnerability
- Microsoft .NET Framework 4.8
- Microsoft .NET Framework 3.5 AND 4.8
-
.NET Framework Remote Code Execution Vulnerability
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 AND 4.8