MN
Product
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
On CISA KEVExploited in the wild
52
CVEs
2
On KEV
9.8
Max CVSS
18
New 30D
Severity mix
Critical 2High 45Medium 5Low 0
Watch
Add Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50659 | 6.5 | Jul 14 | .NET Spoofing Vulnerability Affected: 4.7.0 before 4.7.4143.0 |
| CVE-2026-50324 | 5.9 | Jul 14 | Windows Active Directory Federation Services Denial of Service Vulnerability Affected: 4.7.0 before 4.7.4143.0 |
| CVE-2026-32226 | 5.9 | Apr 14 | .NET Framework Denial of Service Vulnerability Affected: 4.7.0 before 4.8.4801.0 |
| CVE-2019-0657 | 5.9 | Mar 5 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability' Affected: Windows Server 2016; Windows 10 Version 1607 for 32-bit Systems; Windows 10 Version 1607 for x64-based Systems; Windows Server 2016 (Server Core installation) |
| CVE-2025-55248 | 5.7 | Oct 14 | .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability Affected: 4.7.0 before 4.7.04137.03 |
Showing 5