Microsoft .NET Framework 4.7.2 vulnerabilities

Latest Microsoft .NET Framework 4.7.2 CVEs

Newest publication first

1. CVE-2026-32226 .NET Framework Denial of Service Vulnerability

   Published 2026-04-14

   Medium·CVSS 5.9 EPSS 0.56%

   Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.

2. CVE-2022-41064 .NET Framework Information Disclosure Vulnerability

   Published 2022-11-09

   Medium·CVSS 5.8 EPSS 0.92%

   .NET Framework Information Disclosure Vulnerability

3. CVE-2019-0980 Denial of service in ASP.NET Core

   Published 2019-05-16

   High·CVSS 7.5 EPSS 5.0%

   A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.

4. CVE-2019-0981 Denial of service in ASP.NET Core

   Published 2019-05-16

   High·CVSS 7.5 EPSS 5.0%

   A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.

5. CVE-2019-0864 A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'.

   Published 2019-05-16

   Medium·CVSS 5.5 EPSS 1.4%

   A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'.

6. CVE-2019-0820 Regular Expression Denial of Service in System.Text.RegularExpressions

   Published 2019-05-16

   High·CVSS 7.5 EPSS 5.7%

   A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

7. CVE-2019-0613 A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulner...

   Published 2019-03-06

   High·CVSS 8.8 EPSS 15.4%

   A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET F...

8. CVE-2019-0657 Improper Input Validation in .Net Framework API's

   Published 2019-03-06

   Medium·CVSS 5.9 EPSS 4.6%

   A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.