Microsoft .NET 7.0 vulnerabilities

Latest Microsoft .NET 7.0 CVEs

Newest publication first · page 1 of 2

1. CVE-2024-30046 Visual Studio Denial of Service Vulnerability

   Published 2024-05-14

   Medium·CVSS 5.9 EPSS 1.7%

   Visual Studio Denial of Service Vulnerability

2. CVE-2024-30045 .NET and Visual Studio Remote Code Execution Vulnerability

   Published 2024-05-14

   Medium·CVSS 6.3 EPSS 1.2%

   .NET and Visual Studio Remote Code Execution Vulnerability

3. CVE-2024-21409 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

   Published 2024-04-09

   High·CVSS 7.3 EPSS 2.5%

   .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

4. CVE-2024-26190 Microsoft QUIC Denial of Service Vulnerability

   Published 2024-03-12

   High·CVSS 7.5 EPSS 3.0%

   Microsoft QUIC Denial of Service Vulnerability

5. CVE-2024-21392 .NET and Visual Studio Denial of Service Vulnerability

   Published 2024-03-12

   High·CVSS 7.5 EPSS 3.1%

   .NET and Visual Studio Denial of Service Vulnerability

6. CVE-2024-21404 .NET Denial of Service Vulnerability

   Published 2024-02-13

   High·CVSS 7.5 EPSS 2.7%

   .NET Denial of Service Vulnerability

7. CVE-2024-21319 Microsoft Identity Denial of service vulnerability

   Published 2024-01-09

   Medium·CVSS 6.8 EPSS 2.9%

   Microsoft Identity Denial of service vulnerability

8. CVE-2024-0057 NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

   Published 2024-01-09

   Critical·CVSS 9.8 EPSS 2.8%

   NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

9. CVE-2024-20672 .NET Denial of Service Vulnerability

   Published 2024-01-09

   High·CVSS 7.5 EPSS 2.9%

   .NET Denial of Service Vulnerability

10. CVE-2024-0056 Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

    Published 2024-01-09

    High·CVSS 8.7 EPSS 1.2%

    Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

11. CVE-2023-36558 ASP.NET Core Security Feature Bypass Vulnerability

    Published 2023-11-14

    Medium·CVSS 5.5 EPSS 1.1%

    ASP.NET Core Security Feature Bypass Vulnerability

12. CVE-2023-36049 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

    Published 2023-11-14

    Critical·CVSS 9.8 EPSS 6.8%

    .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

13. CVE-2023-36435 Microsoft QUIC Denial of Service Vulnerability

    Published 2023-10-10

    High·CVSS 7.5 EPSS 5.7%

    Microsoft QUIC Denial of Service Vulnerability

14. CVE-2023-38171 Microsoft QUIC Denial of Service Vulnerability

    Published 2023-10-10

    High·CVSS 7.5 EPSS 71.0%

    Microsoft QUIC Denial of Service Vulnerability

15. CVE-2023-36792 Visual Studio Remote Code Execution Vulnerability

    Published 2023-09-12

    High·CVSS 7.8 EPSS 1.2%

    Visual Studio Remote Code Execution Vulnerability

16. CVE-2023-36793 Visual Studio Remote Code Execution Vulnerability

    Published 2023-09-12

    High·CVSS 7.8 EPSS 1.2%

    Visual Studio Remote Code Execution Vulnerability

17. CVE-2023-36796 Visual Studio Remote Code Execution Vulnerability

    Published 2023-09-12

    High·CVSS 7.8 EPSS 1.2%

    Visual Studio Remote Code Execution Vulnerability

18. CVE-2023-36794 Visual Studio Remote Code Execution Vulnerability

    Published 2023-09-12

    High·CVSS 7.8 EPSS 1.2%

    Visual Studio Remote Code Execution Vulnerability

19. CVE-2023-36799 .NET Core and Visual Studio Denial of Service Vulnerability

    Published 2023-09-12

    Medium·CVSS 6.5 EPSS 4.6%

    .NET Core and Visual Studio Denial of Service Vulnerability

20. CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability

    Published 2023-08-08

    High·CVSS 7.5 EPSS 14.1% CISA KEV added 2023-08-09 Exploited in the wild

    .NET and Visual Studio Denial of Service Vulnerability

21. CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

    Published 2023-08-08

    High·CVSS 7.5 EPSS 1.9%

    ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

22. CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability

    Published 2023-08-08

    High·CVSS 7.8 EPSS 2.1%

    .NET and Visual Studio Remote Code Execution Vulnerability

23. CVE-2023-33170 ASP.NET and Visual Studio Security Feature Bypass Vulnerability

    Published 2023-07-11

    High·CVSS 8.1 EPSS 2.0%

    ASP.NET and Visual Studio Security Feature Bypass Vulnerability

24. CVE-2023-33127 .NET and Visual Studio Elevation of Privilege Vulnerability

    Published 2023-07-11

    High·CVSS 8.1 EPSS 1.9%

    .NET and Visual Studio Elevation of Privilege Vulnerability

25. CVE-2023-24936 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

    Published 2023-06-14

    High·CVSS 7.5 EPSS 1.6%

    .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.