Microsoft
Microsoft .net Core: vulnerabilities and CVEs
Microsoft .net Core has 32 published vulnerabilities, 0 of them in the last 12 months. 2 are rated critical and 1 are listed by CISA as actively exploited.
CVEs32
Last 12 months0
Critical2
Actively exploited1
All vulnerabilities in the catalogue →⭐ Follow this technology
🔴 Actively exploited (CISA KEV)
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1147 | High (7.8) | 94% | ⚠ Active exploitation | Jul 14, 2020 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and… |
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41032 | High (7.8) | 1.1% | — | Oct 11, 2022 | NuGet Client Elevation of Privilege Vulnerability |
| CVE-2022-38013 | High (7.5) | 4.0% | — | Sep 13, 2022 | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2022-34716 | Medium (5.9) | 2.3% | — | Aug 9, 2022 | .NET Spoofing Vulnerability |
| CVE-2022-30184 | Medium (5.5) | 5.6% | — | Jun 15, 2022 | .NET and Visual Studio Information Disclosure Vulnerability |
| CVE-2022-29145 | High (7.5) | 5.4% | — | May 10, 2022 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-29117 | High (7.5) | 5.7% | — | May 10, 2022 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-23267 | High (7.5) | 5.7% | — | May 10, 2022 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-24512 | Medium (6.3) | 1.6% | — | Mar 9, 2022 | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-24464 | High (7.5) | 3.6% | — | Mar 9, 2022 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2021-34485 | Medium (5.5) | 1.5% | — | Aug 12, 2021 | .NET Core and Visual Studio Information Disclosure Vulnerability |
| CVE-2021-26423 | High (7.5) | 3.9% | — | Aug 12, 2021 | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2021-31957 | High (7.5) | 5.1% | — | Jun 8, 2021 | ASP.NET Core Denial of Service Vulnerability |
| CVE-2021-31204 | High (7.8) | 1.4% | — | May 11, 2021 | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2021-26701 | Critical (9.8) | 30% | — | Feb 25, 2021 | .NET Core Remote Code Execution Vulnerability |
| CVE-2021-24112 | Critical (9.8) | 3.3% | — | Feb 25, 2021 | .NET Core Remote Code Execution Vulnerability |
| CVE-2021-1721 | Medium (6.5) | 3.3% | — | Feb 25, 2021 | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2020-8927 | Medium (6.5) | 3.2% | — | Sep 15, 2020 | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying… |
| CVE-2020-1147 | High (7.8) | 94% | ⚠ Active exploitation | Jul 14, 2020 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and… |
| CVE-2020-1108 | High (7.5) | 6.3% | — | May 21, 2020 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or… |
| CVE-2020-0606 | High (8.8) | 17% | — | Jan 14, 2020 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context… |
| CVE-2020-0605 | High (8.8) | 18% | — | Jan 14, 2020 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context… |
| CVE-2019-1301 | High (7.5) | 5.3% | — | Sep 11, 2019 | A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'. |
| CVE-2019-0981 | High (7.5) | 4.9% | — | May 16, 2019 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820,… |
| CVE-2019-0980 | High (7.5) | 4.9% | — | May 16, 2019 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820,… |
| CVE-2019-0820 | High (7.5) | 5.7% | — | May 16, 2019 | A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980,… |
| CVE-2019-0657 | Medium (5.9) | 4.5% | — | Mar 5, 2019 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. |
| CVE-2019-0545 | High (7.5) | 9.6% | — | Jan 8, 2019 | An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This… |
| CVE-2018-8409 | High (7.5) | 6.6% | — | Sep 13, 2018 | A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1. |
| CVE-2018-8356 | Medium (5.5) | 0.75% | — | Jul 11, 2018 | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework… |
| CVE-2018-0765 | High (7.5) | 8.3% | — | May 9, 2018 | A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET… |
🎯 How it gets exploited (ATT&CK techniques)
Number of CVEs of this technology mapped to each exploitation or primary-impact technique.