Skip to content

Vulnerabilities of Microsoft Microsoft .NET Framework 3.5 AND 4.7.2

Is your version affected?

CVE Summary Score Published
CVE-2026-50650 Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate… 7.8 High Jul 14, 2026
CVE-2026-50648 Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service… 7.5 High Jul 14, 2026
CVE-2026-50649 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-50646 Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-50527 Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network 7.5 High Jul 14, 2026
CVE-2026-50525 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a… 7.5 High Jul 14, 2026
CVE-2026-47304 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature… 8.1 High Jul 14, 2026
CVE-2026-47302 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a… 7.5 High Jul 14, 2026
CVE-2026-50647 Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an… 7.5 High Jul 14, 2026
CVE-2026-50411 Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny… 7.5 High Jul 14, 2026
CVE-2026-50355 Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… 7.5 High Jul 14, 2026
CVE-2026-50324 Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an… 5.9 Medium Jul 14, 2026
CVE-2026-50368 Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… 7.5 High Jul 14, 2026
CVE-2026-50304 Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… 7.5 High Jul 14, 2026
CVE-2026-50653 Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny… 7.5 High Jul 14, 2026
CVE-2026-50652 Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a… 7.5 High Jul 14, 2026
CVE-2026-35433 Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally 7.3 High May 12, 2026
CVE-2026-32177 Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally 7.3 High May 12, 2026
CVE-2026-23666 Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network 7.5 High Apr 14, 2026
CVE-2026-33116 Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized… 7.5 High Apr 14, 2026
CVE-2026-32226 Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows… 5.9 Medium Apr 14, 2026
CVE-2025-55248 Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose… 4.8 Medium Oct 14, 2025
CVE-2025-21176 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability 8.8 High Jan 14, 2025
CVE-2024-43484 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability 7.5 High Oct 8, 2024
CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability 7.5 High Oct 8, 2024

Other Microsoft products