Microsoft net core vulnerabilities

Latest Microsoft net core CVEs

Newest publication first · page 1 of 2

1. CVE-2022-41032 NuGet Client Elevation of Privilege Vulnerability

   Published 2022-10-11

   High·CVSS 7.8 EPSS 1.3%

   NuGet Client Elevation of Privilege Vulnerability

2. CVE-2022-38013 .NET Core and Visual Studio Denial of Service Vulnerability

   Published 2022-09-13

   High·CVSS 7.5 EPSS 4.3%

   .NET Core and Visual Studio Denial of Service Vulnerability

3. CVE-2022-34716 .NET Spoofing Vulnerability

   Published 2022-08-09

   Medium·CVSS 5.9 EPSS 2.5%

   .NET Spoofing Vulnerability

4. CVE-2022-30184 .NET and Visual Studio Information Disclosure Vulnerability

   Published 2022-06-15

   Medium·CVSS 5.5 EPSS 6.1%

   .NET and Visual Studio Information Disclosure Vulnerability

5. CVE-2022-29145 .NET and Visual Studio Denial of Service Vulnerability

   Published 2022-05-10

   High·CVSS 7.5 EPSS 5.5%

   .NET and Visual Studio Denial of Service Vulnerability

6. CVE-2022-29117 .NET and Visual Studio Denial of Service Vulnerability

   Published 2022-05-10

   High·CVSS 7.5 EPSS 5.7%

   .NET and Visual Studio Denial of Service Vulnerability

7. CVE-2022-23267 .NET and Visual Studio Denial of Service Vulnerability

   Published 2022-05-10

   High·CVSS 7.5 EPSS 5.7%

   .NET and Visual Studio Denial of Service Vulnerability

8. CVE-2022-24512 .NET and Visual Studio Remote Code Execution Vulnerability

   Published 2022-03-09

   Medium·CVSS 6.3 EPSS 1.6%

   .NET and Visual Studio Remote Code Execution Vulnerability

9. CVE-2022-24464 .NET and Visual Studio Denial of Service Vulnerability

   Published 2022-03-09

   High·CVSS 7.5 EPSS 3.4%

   .NET and Visual Studio Denial of Service Vulnerability

10. CVE-2021-34485 .NET Core and Visual Studio Information Disclosure Vulnerability

    Published 2021-08-12

    Medium·CVSS 5.5 EPSS 2.1%

    .NET Core and Visual Studio Information Disclosure Vulnerability

11. CVE-2021-26423 .NET Core and Visual Studio Denial of Service Vulnerability

    Published 2021-08-12

    High·CVSS 7.5 EPSS 3.9%

    .NET Core and Visual Studio Denial of Service Vulnerability

12. CVE-2021-31957 ASP.NET Core Denial of Service Vulnerability

    Published 2021-06-08

    High·CVSS 7.5 EPSS 5.1%

    ASP.NET Core Denial of Service Vulnerability

13. CVE-2021-31204 .NET and Visual Studio Elevation of Privilege Vulnerability

    Published 2021-05-11

    High·CVSS 7.8 EPSS 1.2%

    .NET and Visual Studio Elevation of Privilege Vulnerability

14. CVE-2021-26701 .NET Core Remote Code Execution Vulnerability

    Published 2021-02-25

    Critical·CVSS 9.8 EPSS 30.1%

    .NET Core Remote Code Execution Vulnerability

15. CVE-2021-24112 .NET Core Remote Code Execution Vulnerability

    Published 2021-02-25

    Critical·CVSS 9.8 EPSS 3.5%

    .NET Core Remote Code Execution Vulnerability

16. CVE-2021-1721 .NET Core and Visual Studio Denial of Service Vulnerability

    Published 2021-02-25

    Medium·CVSS 6.5 EPSS 3.3%

    .NET Core and Visual Studio Denial of Service Vulnerability

17. CVE-2020-8927 Buffer overflow in Brotli library

    Published 2020-09-15

    Medium·CVSS 6.5 EPSS 3.3%

    A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to upda...

18. CVE-2020-1147 .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

    Published 2020-07-14

    High·CVSS 7.8 EPSS 95.8% CISA KEV added 2021-11-03 Exploited in the wild Framework module Public exploit

    A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

19. CVE-2020-1108 .NET Core & .NET Framework Denial of Service Vulnerability

    Published 2020-05-21

    High·CVSS 7.5 EPSS 6.5%

    A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exp...

20. CVE-2020-0606 Remote code execution in Microsoft.WindowsDesktop.App.Ref

    Published 2020-01-14

    High·CVSS 8.8 EPSS 18.3%

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Executi...

21. CVE-2020-0605 A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary....

    Published 2020-01-14

    High·CVSS 8.8 EPSS 18.4%

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Executi...

22. CVE-2019-1301 High severity vulnerability that affects System.Management.Automation

    Published 2019-09-11

    High·CVSS 7.5 EPSS 5.4%

    A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'.

23. CVE-2019-0980 Denial of service in ASP.NET Core

    Published 2019-05-16

    High·CVSS 7.5 EPSS 5.0%

    A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.

24. CVE-2019-0981 Denial of service in ASP.NET Core

    Published 2019-05-16

    High·CVSS 7.5 EPSS 5.0%

    A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.

25. CVE-2019-0820 Regular Expression Denial of Service in System.Text.RegularExpressions

    Published 2019-05-16

    High·CVSS 7.5 EPSS 5.7%

    A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.