Veille CVE

Recherche « Microsoft .net framework »

46 CVE

Critique 1 Élevée 42 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft .net framework » ✕
  1. CVE-2026-97801 7.5 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

  2. CVE-2026-97788 7.5 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

  3. CVE-2026-96960 7.5 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

  4. CVE-2026-96959 7.5 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

  5. CVE-2026-96958 7.5 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

  6. CVE-2026-96233 7.5 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  7. CVE-2026-96224 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

  8. CVE-2026-96222 7.4 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

  9. CVE-2026-85363 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

  10. CVE-2026-84008 7.5 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

  11. CVE-2026-83520 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

  12. CVE-2026-70194 6.5 Moyenne

    Microsoft .NET 11.0 runtime · Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10

    Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.

  13. CVE-2026-70174 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

  14. CVE-2026-70035 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

  15. CVE-2026-70007 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

  16. CVE-2026-69651 7.5 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

  17. CVE-2026-58280 7.5 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

  18. CVE-2026-108398 8.8 Élevée

    Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1

    Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

  19. CVE-2026-102869 8.8 Élevée

    Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1

    Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

  20. CVE-2026-69522 8.8 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 11.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

  21. CVE-2026-70354 7.8 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

  22. CVE-2026-65810 7.8 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.

  23. CVE-2026-62897 7.0 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

  24. CVE-2026-62886 7.8 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

  25. CVE-2026-62872 8.8 Élevée

    Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.

  26. CVE-2026-50659 6.5 Moyenne

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

  27. CVE-2026-50650 7.8 Élevée

    Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.7.2

    Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

  28. CVE-2026-50649 7.8 Élevée

    Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.7.2

    Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

  29. CVE-2026-50648 7.5 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

  30. CVE-2026-50646 7.8 Élevée

    Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.7.2

    Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

  31. CVE-2026-50527 7.5 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

  32. CVE-2026-50525 7.5 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

  33. CVE-2026-50524 7.5 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft Visual Studio 2022 version 17.12

    Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.

  34. CVE-2026-47304 9.8 Critique

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

  35. CVE-2026-47302 7.5 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

  36. CVE-2026-50647 7.5 Élevée

    Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1 · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

    Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

  37. CVE-2026-50411 7.5 Élevée

    Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1 · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

    Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

  38. CVE-2026-50368 7.5 Élevée

    Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1 · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

    Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

  39. CVE-2026-50355 7.5 Élevée

    Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1 · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

    Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

  40. CVE-2026-50324 5.9 Moyenne

    Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1 · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

    Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

  41. CVE-2026-50304 7.5 Élevée

    Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1 · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

    Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

  42. CVE-2026-50653 7.5 Élevée

    Microsoft Azure Active Directory · Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.

  43. CVE-2026-50652 7.5 Élevée

    Microsoft Azure Active Directory · Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8

    Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.

  44. CVE-2023-37524 7.8 Élevée

    HCLSoftware Traveler for Microsoft Outlook · Hcltech traveler for microsoft outlook

    HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service.  Since .NET Framework 4.5 has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses through vulnerable third-party components.

  45. CVE-2026-35433 7.3 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

  46. CVE-2026-32177 7.3 Élevée

    Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

    Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.