Vulnerabilities

Summary — last 7 days

New vulnerabilities4,815▲ 1,802 vs. last week
Critical / high2,656▲ 1,132 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)208▲ 38 vs. last week
–

208 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.5)2.6%—Microsoft .net FrameworkMicrosoft .net6/14/20236/17/2026
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
ModifiedHigh (7.8)0.90%—Microsoft .net Framework6/14/20236/17/2026
.NET Framework Remote Code Execution Vulnerability
ModifiedHigh (7.5)1.6%—Microsoft .net FrameworkMicrosoft .net6/14/20236/17/2026
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
ModifiedHigh (7.8)1.2%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual StudioMicrosoft Visual Studio 2017+26/14/20236/17/2026
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
ModifiedHigh (7.8)1.1%—Microsoft .net FrameworkMicrosoft .netMicrosoft Visual Studio 20226/14/20236/17/2026
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
ModifiedHigh (7.8)1.1%—Microsoft .netMicrosoft Visual Studio 2017Microsoft Visual Studio 2019Microsoft Visual Studio 2022+12/14/20238/19/2026
.NET and Visual Studio Remote Code Execution Vulnerability
ModifiedMedium (5)0.92%—Microsoft .net Framework2/14/20238/19/2026
.NET Framework Denial of Service Vulnerability
ModifiedHigh (7.8)1.2%—Microsoft .net Framework12/13/20226/17/2026
.NET Framework Remote Code Execution Vulnerability
ModifiedMedium (5.8)0.80%—Microsoft .net FrameworkMicrosoft Nuget11/9/20228/10/2026
.NET Framework Information Disclosure Vulnerability
ModifiedHigh (7.8)1.6%—Microsoft .net Framework9/13/20226/17/2026
.NET Framework Remote Code Execution Vulnerability
ModifiedMedium (5.5)3.2%—Microsoft .net Framework5/10/20226/17/2026
.NET Framework Denial of Service Vulnerability
ModifiedHigh (7.5)3.6%—Microsoft .net Framework4/15/20226/17/2026
.NET Framework Denial of Service Vulnerability
ModifiedHigh (7.5)3.1%—Microsoft .net Framework1/11/20226/17/2026
.NET Framework Denial of Service Vulnerability
ModifiedHigh (7.5)3.8%—Microsoft .net Framework2/25/20216/17/2026
.NET Framework Denial of Service Vulnerability
ModifiedMedium (5.5)3.3%—Microsoft .net Framework10/16/20206/17/2026
<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system's memory.</p> <p>To exploit the vulnerability, an authenticated attacker would need to run a specially…
ModifiedMedium (5.5)1.1%—Microsoft .net Framework8/17/20206/17/2026
An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow access to cached files. An attacker who successfully exploited this vulnerability could gain access to restricted files. To exploit this vulnerability, an attacker would need to send a specially crafted…
ModifiedHigh (7.8)3.8%—Microsoft .net Framework8/17/20206/17/2026
A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a web application. The…
AnalyzedHigh (7.8)94%⚠ Active exploitation💥 ExploitMicrosoft .net CoreMicrosoft .net FrameworkMicrosoft Sharepoint Enterprise ServerMicrosoft Sharepoint Server+27/14/20206/17/2026
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
ModifiedHigh (7.5)6.4%—Microsoft .netMicrosoft .net CoreMicrosoft .net FrameworkMicrosoft Visual Studio 2017+35/21/20208/19/2026
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without…
ModifiedHigh (7.8)2.5%💥 PoCMicrosoft .net Framework5/21/20208/19/2026
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the vulnerability by correcting how .NET…
AnalyzedCritical (9.8)99%⚠ Active exploitation💥 ExploitMicrosoft .net Framework1/14/20206/17/2026
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
ModifiedHigh (8.8)17%—Microsoft .net FrameworkMicrosoft .net Core1/14/20206/17/2026
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is…
ModifiedHigh (8.8)18%—Microsoft .net FrameworkMicrosoft .net Core1/14/20206/17/2026
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is…
ModifiedMedium (5.5)1.0%—Microsoft .net Framework9/11/20196/17/2026
An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerability'.
ModifiedHigh (8.8)10.0%—Microsoft .net FrameworkMicrosoft Visual Studio 20177/15/20196/17/2026
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'.
Orbitaley — Vulnerabilities