Microsoft .NET Framework 3.5 AND 4.7.2 vulnerabilities

Product

Microsoft .NET Framework 3.5 AND 4.7.2

by Microsoft · last CVE Oct 13, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities73 In the news0 Timeline

Severity mix

Critical 3High 64Medium 6Low 0

Severity

All severities73 Critical3 High64 Medium6 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Microsoft .NET Framework 3.5 AND 4.7.2 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-23666	7.5	1%	Apr 14	.NET Framework Denial of Service Vulnerability Affected: 4.7.0 before 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0
CVE-2026-33116	7.5	2%	Apr 14	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 4.7.0 before 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0
CVE-2024-43484	7.5	3%	Oct 8	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 4.7.0 before 4.7.04115.01
CVE-2024-43483	7.5	3%	Oct 8	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 4.7.0 before 4.7.04115.01
CVE-2024-21312	7.5	4%	Jan 9	.NET Framework Denial of Service Vulnerability Affected: 4.7.0 before 4.7.04081.03
CVE-2023-32030	7.5	2%	Jun 14	.NET and Visual Studio Denial of Service Vulnerability Affected: 4.7.0 before 4.7.4050.0
CVE-2023-29331	7.5	3%	Jun 14	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Affected: 4.7.0 before 4.7.4050.0
CVE-2023-24936	7.5	2%	Jun 14	.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability Affected: 4.7.0 before 4.7.4050.0
CVE-2026-96222	7.4	1%	Oct 13	Active Directory Federation Services (AD FS) Spoofing Vulnerability Affected: 4.7.0 before 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0
CVE-2026-35433	7.3	1%	May 12	.NET Elevation of Privilege Vulnerability Affected: 4.7.0 before 4.8.9334.0 and 4.8.4802.0
CVE-2026-32177	7.3	1%	May 12	.NET Elevation of Privilege Vulnerability Affected: 4.7.0 before 4.8.9334.0 and 4.8.4802.0
CVE-2024-38081	7.3	1%	Jul 9	.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability Affected: 4.7.0 before 4.7.2.4101.03
CVE-2024-21409	7.3	3%	Apr 9	.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Affected: 4.7.0 before 4.7.4092.0
CVE-2026-62897	7.0	0%	Aug 11	.NET Framework Remote Code Execution Vulnerability Affected: 4.7.0 before 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0