Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 vulnerabilities

Product

Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2

by Microsoft · last CVE Apr 15, 2022

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities17 In the news0 Timeline

Severity mix

Critical 1High 13Medium 3Low 0

Severity

All severities17 Critical1 High13 Medium3 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-1147 In wildKEV	7.8	96%	Jul 14	Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows RT 8.1; Windows Server 2008 R2 for x64-based Systems Service Pack 1; +5 more
CVE-2020-0606	8.8	17%	Jan 14	A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability… Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows RT 8.1; Windows Server 2008 R2 for x64-based Systems Service Pack 1; +5 more
CVE-2020-0605	8.8	17%	Jan 14	A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability… Affected: Windows RT 8.1; Windows 8.1 for x64-based systems; Windows 7 for 32-bit Systems Service Pack 1; Windows 8.1 for 32-bit systems; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2012 R2; +5 more
CVE-2019-1113	8.8	10%	Jul 15	A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability… Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2012; Windows Server 2012 (Server Core installation); +5 more
CVE-2019-0613	8.8	15%	Mar 5	A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully… Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2012; Windows Server 2012 (Server Core installation); +5 more
CVE-2022-26832	7.5	4%	Apr 15	.NET Framework Denial of Service Vulnerability Affected: 4.0.0.0 before 4.7.03930.02
CVE-2022-21911	7.5	3%	Jan 11	.NET Framework Denial of Service Vulnerability Affected: 4.0.0.0 before 4.7.3905.0
CVE-2020-1108	7.5	6%	May 21	.NET Core & .NET Framework Denial of Service Vulnerability Affected: 4.0.0.0 before publication
CVE-2019-1083	7.5	8%	Jul 15	A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability' Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2012; Windows Server 2012 (Server Core installation); +5 more
CVE-2019-1006	7.5	6%	Jul 15	An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary… Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2012; Windows Server 2012 (Server Core installation); +5 more
CVE-2019-0980	7.5	5%	May 16	A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability' Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2012; Windows Server 2012 (Server Core installation); +5 more
CVE-2019-0981	7.5	5%	May 16	A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability' Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2012; Windows Server 2012 (Server Core installation); +5 more
CVE-2019-0820	7.5	6%	May 16	A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability' Affected: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2012; Windows Server 2012 (Server Core installation); +5 more