CVE-20XX-?
agent?

Microsoft .net CVEs.

Published CVEs affecting Microsoft .net, ranked by exploit odds.

81 CVEs · updated 2026-11-06 20:49 UTC

  1. CVE-2023-38171

    Microsoft QUIC Denial of Service Vulnerability

    Memory safety Microsoft .net

    7.5 HIGH 71% exploit odds Fix listed
  2. CVE-2021-26701

    .NET Core Remote Code Execution Vulnerability

    Code execution Microsoft .net

    8.1 HIGH 30% exploit odds Fix listed
  3. CVE-2021-41355

    .NET Core and Visual Studio Information Disclosure Vulnerability

    Disclosure Library Microsoft .net

    5.7 MEDIUM 20% exploit odds Fix listed
  4. CVE-2023-38180

    .NET and Visual Studio Denial of Service Vulnerability

    exploited Denial of service Microsoft .net

    7.5 HIGH 14% exploit odds Fix listed
  5. CVE-2020-1108

    A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application. The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.

    Denial of service Web app Microsoft .net

    7.5 HIGH 6% exploit odds Fix listed
  6. CVE-2022-29117

    .NET and Visual Studio Denial of Service Vulnerability

    Denial of service Microsoft .net

    7.5 HIGH 6% exploit odds Fix listed
  7. CVE-2023-36435

    Microsoft QUIC Denial of Service Vulnerability

    Denial of service Microsoft .net

    7.5 HIGH 6% exploit odds Fix listed
  8. CVE-2022-23267

    .NET and Visual Studio Denial of Service Vulnerability

    Denial of service Microsoft .net

    7.5 HIGH 6% exploit odds Fix listed
  9. CVE-2022-29145

    .NET and Visual Studio Denial of Service Vulnerability

    Denial of service Microsoft .net

    7.5 HIGH 6% exploit odds Fix listed
  10. CVE-2021-31957

    ASP.NET Core Denial of Service Vulnerability

    Denial of service Web app Microsoft .net

    5.9 MEDIUM 5% exploit odds Fix listed
  11. CVE-2023-36799

    .NET Core and Visual Studio Denial of Service Vulnerability

    Microsoft .net

    6.5 MEDIUM 5% exploit odds Fix listed
  12. CVE-2022-38013

    .NET Core and Visual Studio Denial of Service Vulnerability

    Microsoft .net

    7.5 HIGH 4% exploit odds Fix listed
  13. CVE-2021-26423

    .NET Core and Visual Studio Denial of Service Vulnerability

    Microsoft .net

    7.5 HIGH 4% exploit odds Fix listed
  14. CVE-2022-21986

    .NET Denial of Service Vulnerability

    Microsoft .net

    7.5 HIGH 4% exploit odds No fix listed
  15. CVE-2024-43498

    .NET and Visual Studio Remote Code Execution Vulnerability

    Code execution Microsoft .net

    9.8 CRITICAL 4% exploit odds Fix listed
  16. CVE-2022-24464

    .NET and Visual Studio Denial of Service Vulnerability

    Microsoft .net

    7.5 HIGH 4% exploit odds Fix listed
  17. CVE-2021-24112

    .NET Core Remote Code Execution Vulnerability

    Microsoft .net

    8.1 HIGH 3% exploit odds Fix listed
  18. CVE-2021-1721

    .NET Core and Visual Studio Denial of Service Vulnerability

    Microsoft .net

    6.5 MEDIUM 3% exploit odds Fix listed
  19. CVE-2026-25667

    ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet, because of an incorrect exit condition for HTTP/3 Encoder/Decoder stream processing.

    Denial of service Microsoft .net

    7.5 HIGH 3% exploit odds Fix listed
  20. CVE-2024-21392

    .NET and Visual Studio Denial of Service Vulnerability

    Microsoft .net

    7.5 HIGH 3% exploit odds Fix listed
  21. CVE-2024-43485

    .NET and Visual Studio Denial of Service Vulnerability

    Denial of service Microsoft .net

    7.5 HIGH 3% exploit odds Fix listed
  22. CVE-2024-26190

    Microsoft QUIC Denial of Service Vulnerability

    Microsoft .net

    7.5 HIGH 3% exploit odds Fix listed
  23. CVE-2024-30105

    .NET and Visual Studio Denial of Service Vulnerability

    Denial of service Microsoft .net

    7.5 HIGH 3% exploit odds Fix listed
  24. CVE-2024-20672

    .NET Denial of Service Vulnerability

    Microsoft .net

    7.5 HIGH 3% exploit odds Fix listed
  25. CVE-2024-21319

    Microsoft Identity Denial of service vulnerability

    Microsoft .net

    6.8 MEDIUM 3% exploit odds Fix listed
  26. CVE-2023-21538

    .NET Denial of Service Vulnerability

    Microsoft .net

    7.5 HIGH 3% exploit odds No fix listed
  27. CVE-2024-38095

    .NET and Visual Studio Denial of Service Vulnerability

    Denial of service Microsoft .net

    7.5 HIGH 3% exploit odds Fix listed
  28. CVE-2024-38168

    .NET and Visual Studio Denial of Service Vulnerability

    Denial of service Microsoft .net

    7.5 HIGH 3% exploit odds Fix listed
  29. CVE-2024-43499

    .NET and Visual Studio Denial of Service Vulnerability

    Denial of service Microsoft .net

    7.5 HIGH 3% exploit odds Fix listed
  30. CVE-2023-38178

    .NET Core and Visual Studio Denial of Service Vulnerability

    Microsoft .net

    7.5 HIGH 3% exploit odds Fix listed
  31. CVE-2024-35264

    .NET and Visual Studio Remote Code Execution Vulnerability

    Memory safety Microsoft .net

    8.1 HIGH 3% exploit odds Fix listed
  32. CVE-2022-34716

    .NET Spoofing Vulnerability

    Microsoft .net

    5.9 MEDIUM 2% exploit odds No fix listed
  33. CVE-2026-42899

    Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

    Denial of service Microsoft .net

    7.5 HIGH 2% exploit odds Fix listed
  34. CVE-2025-21176

    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    Code execution Microsoft .net

    8.8 HIGH 2% exploit odds Fix listed
  35. CVE-2026-32178

    Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

    Other Microsoft .net

    7.5 HIGH 2% exploit odds Fix listed
  36. CVE-2026-26127

    Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

    Memory safety Microsoft .net

    7.5 HIGH 2% exploit odds Fix listed
  37. CVE-2026-33116

    Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

    Denial of service Microsoft .net

    7.5 HIGH 2% exploit odds Fix listed
  38. CVE-2023-35390

    .NET and Visual Studio Remote Code Execution Vulnerability

    Microsoft .net

    7.8 HIGH 2% exploit odds Fix listed
  39. CVE-2021-34485

    .NET Core and Visual Studio Information Disclosure Vulnerability

    Microsoft .net

    5.0 MEDIUM 2% exploit odds Fix listed
  40. CVE-2023-33170

    ASP.NET and Visual Studio Security Feature Bypass Vulnerability

    Microsoft .net

    8.1 HIGH 2% exploit odds Fix listed
  41. CVE-2023-35391

    ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

    Microsoft .net

    6.2 MEDIUM 2% exploit odds Fix listed
  42. CVE-2026-32203

    Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.

    Memory safety Microsoft .net

    7.5 HIGH 2% exploit odds Fix listed
  43. CVE-2023-33127

    .NET and Visual Studio Elevation of Privilege Vulnerability

    Microsoft .net

    8.1 HIGH 2% exploit odds Fix listed
  44. CVE-2025-21172

    .NET and Visual Studio Remote Code Execution Vulnerability

    Memory safety Microsoft .net

    7.5 HIGH 2% exploit odds Fix listed
  45. CVE-2026-26171

    Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

    Denial of service Microsoft .net

    7.5 HIGH 2% exploit odds Fix listed
  46. CVE-2025-21171

    .NET Remote Code Execution Vulnerability

    Memory safety Microsoft .net

    7.5 HIGH 2% exploit odds Fix listed
  47. CVE-2024-30046

    Visual Studio Denial of Service Vulnerability

    Denial of service Library Microsoft .net

    5.9 MEDIUM 2% exploit odds Fix listed
  48. CVE-2022-24512

    .NET and Visual Studio Remote Code Execution Vulnerability

    Microsoft .net

    6.3 MEDIUM 2% exploit odds Fix listed
  49. CVE-2023-28260

    .NET DLL Hijacking Remote Code Execution Vulnerability

    Microsoft .net

    7.8 HIGH 2% exploit odds Fix listed
  50. CVE-2024-38167

    .NET and Visual Studio Information Disclosure Vulnerability

    Disclosure Library Microsoft .net

    6.5 MEDIUM 1% exploit odds Fix listed

All CVEs affecting Microsoft .net that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.