MN
Product
Microsoft .NET Framework 3.5 AND 4.7.2
On CISA KEVExploited in the wild
75
CVEs
1
On KEV
9.8
Max CVSS
18
New 30D
Severity mix
Critical 3High 66Medium 6Low 0
Watch
Add Microsoft .NET Framework 3.5 AND 4.7.2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50304 | 7.5 | Jul 14 | Windows Active Directory Federation Services Denial of Service Vulnerability Affected: 4.7.0 before 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
| CVE-2026-50653 | 7.5 | Jul 14 | Azure Active Directory Denial of Service Vulnerability Affected: 4.7.0 before 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
| CVE-2026-50652 | 7.5 | Jul 14 | Azure Active Directory Denial of Service Vulnerability Affected: 4.7.0 before 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
| CVE-2026-23666 | 7.5 | Apr 14 | .NET Framework Denial of Service Vulnerability Affected: 4.7.0 before 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0 |
| CVE-2026-33116 | 7.5 | Apr 14 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 4.7.0 before 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0 |
| CVE-2024-43484 | 7.5 | Oct 8 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 4.7.0 before 4.7.04115.01 |
| CVE-2024-43483 | 7.5 | Oct 8 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 4.7.0 before 4.7.04115.01 |
| CVE-2024-21312 | 7.5 | Jan 9 | .NET Framework Denial of Service Vulnerability Affected: 4.7.0 before 4.7.04081.03 |
| CVE-2023-32030 | 7.5 | Jun 14 | .NET and Visual Studio Denial of Service Vulnerability Affected: 4.7.0 before 4.7.4050.0 |
| CVE-2023-29331 | 7.5 | Jun 14 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 4.7.0 before 4.7.4050.0 |
| CVE-2023-24936 | 7.5 | Jun 14 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability Affected: 4.7.0 before 4.7.4050.0 |
| CVE-2022-26832 | 7.5 | Apr 15 | .NET Framework Denial of Service Vulnerability Affected: 4.7.0 before 4.7.3930.02 |
| CVE-2022-21911 | 7.5 | Jan 11 | .NET Framework Denial of Service Vulnerability Affected: 4.7.0 before 4.7.3905.0 |
| CVE-2026-96222 | 7.4 | Oct 13 | Active Directory Federation Services (AD FS) Spoofing Vulnerability Affected: 4.7.0 before 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 |
| CVE-2026-35433 | 7.3 | May 12 | .NET Elevation of Privilege Vulnerability Affected: 4.7.0 before 4.8.9334.0 and 4.8.4802.0 |
| CVE-2026-32177 | 7.3 | May 12 | .NET Elevation of Privilege Vulnerability Affected: 4.7.0 before 4.8.9334.0 and 4.8.4802.0 |
| CVE-2024-38081 | 7.3 | Jul 9 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability Affected: 4.7.0 before 4.7.2.4101.03 |
| CVE-2024-21409 | 7.3 | Apr 9 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 4.7.0 before 4.7.4092.0 |
| CVE-2026-62897 | 7.0 | Aug 11 | .NET Framework Remote Code Execution Vulnerability Affected: 4.7.0 before 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0 |
| CVE-2026-50659 | 6.5 | Jul 14 | .NET Spoofing Vulnerability Affected: 4.7.0 before 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
| CVE-2026-50324 | 5.9 | Jul 14 | Windows Active Directory Federation Services Denial of Service Vulnerability Affected: 4.7.0 before 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 |
| CVE-2026-32226 | 5.9 | Apr 14 | .NET Framework Denial of Service Vulnerability Affected: 4.7.0 before 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0 |
| CVE-2023-36873 | 5.9 | Aug 8 | .NET Framework Spoofing Vulnerability Affected: 4.7.0 before 3.5.04057.05 |
| CVE-2025-55248 | 5.7 | Oct 14 | .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability Affected: 4.7.0 before 4.7.04137.03 |
| CVE-2023-21722 | 5.0 | Feb 14 | .NET Framework Denial of Service Vulnerability Affected: 4.7.0 before 10.0.04038.03 |