Microsoft .NET
7 known vulnerabilities in Microsoft .NET, 1 actively exploited, with patch priority, exploit likelihood and the news covering them.
Recently exploited
- CVE-2023-38180 CVSS 7.5 high · actively exploited Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
Latest vulnerabilities
- CVE-2026-71328 CVSS 8.8 high Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- CVE-2026-69806 CVSS 7.0 high Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-69522 CVSS 8.8 high Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- CVE-2026-69439 CVSS 8.8 high Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69304 CVSS 5.9 medium Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a…
- CVE-2026-58649 CVSS 6.5 medium Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2023-38180 CVSS 7.5 high · actively exploited Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability