Product · Microsoft

.NET 8.0

38 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

29 results · Clear filters · Feed

High 7.5

CVE-2026-42899

ASP.NET Core Denial of Service Vulnerability

Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Microsoft .NET 8.0 .NET 9.0 .NET 10.0 Ubuntu Alpine Wolfi NuGet

May 12, 2026
High 7.3

CVE-2026-35433

.NET Elevation of Privilege Vulnerability

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

Microsoft Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 4.8 Ubuntu Alpine NuGet

May 12, 2026
High 7.3

CVE-2026-32177

.NET Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine

May 12, 2026
High 7.5

CVE-2026-32203

.NET and Visual Studio Denial of Service Vulnerability

Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.

Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2022 version 17.12 .NET 8.0 Ubuntu NuGet

Apr 14, 2026
High 7.5

CVE-2026-26171

.NET Denial of Service Vulnerability

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

Microsoft .NET 8.0 .NET 9.0 PowerShell 7.5 Ubuntu Alpine Wolfi NuGet

Apr 14, 2026
High 7.5

CVE-2026-33116

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine Wolfi NuGet

Apr 14, 2026
High 7.5

CVE-2026-32178

.NET Spoofing Vulnerability

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2022 version 17.12 .NET 8.0 Ubuntu Alpine Wolfi NuGet

Apr 14, 2026
High 7.5

CVE-2026-21218

.NET Spoofing Vulnerability

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.

Microsoft .NET 8.0 .NET 9.0 .NET 10.0 Ubuntu Alpine Wolfi NuGet

Feb 10, 2026
High 7.3

CVE-2025-55247

.NET Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Microsoft .NET 8.0 .NET 9.0 dotnet7 Ubuntu Alpine NuGet

Oct 14, 2025
High 7.5

CVE-2025-30399

.NET and Visual Studio Remote Code Execution Vulnerability

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2022 version 17.8 Microsoft Visual Studio 2022 version 17.12 Ubuntu Alpine Wolfi NuGet

Jun 13, 2025
High 8.0

CVE-2025-26646

.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.

Microsoft Microsoft Visual Studio 2022 version 17.8 Microsoft Visual Studio 2022 version 17.12 .NET 8.0 Ubuntu Alpine Wolfi NuGet

May 13, 2025
High 7.5

CVE-2025-21172

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Ubuntu Alpine Wolfi NuGet

Jan 14, 2025
High 7.3

CVE-2025-21173

.NET Elevation of Privilege Vulnerability

.NET Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.8 Microsoft Visual Studio 2022 version 17.12 Ubuntu Alpine Wolfi

Jan 14, 2025
High 8.8

CVE-2025-21176

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine Wolfi NuGet

Jan 14, 2025
High 7.5

CVE-2024-43485

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.8 .NET 6.0 Ubuntu Alpine NuGet

Oct 8, 2024
High 7.5

CVE-2024-43484

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet

Oct 8, 2024
High 7.5

CVE-2024-43483

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet

Oct 8, 2024
High 8.1

CVE-2024-38229

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.8 .NET 8.0 Ubuntu Alpine NuGet

Oct 8, 2024
High 7.5

CVE-2024-38168

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.8 Microsoft Visual Studio 2022 version 17.10 Alpine NuGet

Aug 13, 2024
High 7.5

CVE-2024-38095

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.8 Ubuntu Alpine Wolfi NuGet

Jul 9, 2024
High 7.5

CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.8 Ubuntu Alpine Wolfi NuGet

Jul 9, 2024
High 8.1

CVE-2024-35264

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.8 Ubuntu Alpine NuGet

Jul 9, 2024
High 7.3

CVE-2024-21409 Public exploit

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Alpine NuGet

Apr 9, 2024
High 7.5

CVE-2024-26190

Microsoft QUIC Denial of Service Vulnerability

Microsoft QUIC Denial of Service Vulnerability

Microsoft Windows Server 2022 Windows 11 version 23H2 Windows 11 version 22H2 Windows Alpine

Mar 12, 2024
High 7.5

CVE-2024-21392

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.8 Ubuntu Alpine NuGet

Mar 12, 2024
High 7.5

CVE-2024-21404

.NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.8 Ubuntu Alpine

Feb 13, 2024
High 8.7

CVE-2024-0056

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Alpine NuGet

Jan 9, 2024
High 8.2

CVE-2023-36038

ASP.NET Core Denial of Service Vulnerability

ASP.NET Core Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2

Nov 14, 2023
High 7.6

CVE-2023-36049

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet

Nov 14, 2023