Skip to content

Product

Microsoft .NET Framework 3.5.1 vulnerabilities

36 published CVES affecting Microsoft .NET Framework 3.5.1, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
36
Critical
2
High
30
Medium
4
Low
0
Unscored
0
CISA KEV
3

Latest Microsoft .NET Framework 3.5.1 CVEs

Newest publication first · page 1 of 2

  22. CVE-2020-1147 .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

    Published
    HighCVSS 7.8 EPSS 95.8% CISA KEV added 2021-11-03 Exploited in the wild Framework module Public exploit

    A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

  23. CVE-2020-1108 .NET Core & .NET Framework Denial of Service Vulnerability

    Published
    HighCVSS 7.5 EPSS 6.5%

    A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exp...

  24. CVE-2020-1066 .NET Framework Elevation of Privilege Vulnerability

    Published
    HighCVSS 7.8 EPSS 2.5%

    An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the vuln...

  25. CVE-2020-0646 A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.

    Published
    CriticalCVSS 9.8 EPSS 99.2% CISA KEV added 2021-11-03 Exploited in the wild Framework module Public exploit

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.