CVE-20XX-?
agent?

Microsoft .net Framework CVEs.

Published CVEs affecting Microsoft .net Framework, ranked by exploit odds.

7 CVEs · updated 2026-11-06 21:21 UTC

Reset all
  1. CVE-2015-1671

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."

    exploited Code execution OS & kernel Microsoft .net Framework

    7.8 HIGH 49% exploit odds Fix listed
  2. CVE-2020-0605

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0606.

    Code execution Microsoft .net Framework

    8.8 HIGH 18% exploit odds Fix listed
  3. CVE-2020-0606

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0605.

    Code execution Microsoft .net Framework

    8.8 HIGH 18% exploit odds Fix listed
  4. CVE-2019-1113

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'.

    Code execution Microsoft .net Framework

    8.8 HIGH 10% exploit odds Fix listed
  5. CVE-2026-50646

    Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

    Code execution Microsoft .net Framework

    7.8 HIGH 4% exploit odds Fix listed
  6. CVE-2026-50649

    Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

    Code execution Microsoft .net Framework

    7.8 HIGH 4% exploit odds Fix listed
  7. CVE-2026-50652

    Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.

    Code execution Microsoft .net Framework

    7.5 HIGH 2% exploit odds Fix listed

All CVEs affecting Microsoft .net Framework that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.