Microsoft Corp .NET Core

Name: Microsoft Corp .NET Core
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical16high9medium2low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-1147US	high7.8OT critical	94.0% (100th)	KEV	no fix	2020-07-14	2 versions
CVE-2022-41032US	high7.8	1.29% (70th)	Exploit	no fix	2022-10-11	≤ 3.1
CVE-2021-26701US	high7.5	30.1% (98th)	—	no fix	2021-02-25	3 versions
CVE-2020-0606US	high8.8	17.2% (97th)	—	no fix	2020-01-14	2 versions
CVE-2020-0605US	high8.8	17.1% (97th)	—	no fix	2020-01-14	2 versions
CVE-2018-8292US	high7.5	14.8% (97th)	—	no fix	2018-10-10	3 versions
CVE-2019-0545US	high7.5	9.61% (95th)	—	no fix	2019-01-08	2 versions
CVE-2018-8409US	high7.5	6.56% (94th)	—	no fix	2018-09-13	≤ 2.1
CVE-2020-1108US	high7.5	6.46% (94th)	—	no fix	2020-05-21	3 versions
CVE-2019-0820US	high7.5	5.72% (93rd)	—	no fix	2019-05-16	1.0 → 2.2
CVE-2022-30184US	medium4.3	5.70% (93rd)	—	no fix	2022-06-15	≤ 3.1
CVE-2019-1301US	high7.5	5.33% (93rd)	—	no fix	2019-09-11	2 versions
CVE-2021-31957US	medium5.0	5.14% (92nd)	—	no fix	2021-06-08	≤ 3.1
CVE-2019-0981US	high7.5	4.94% (92nd)	—	no fix	2019-05-16	4 versions
CVE-2019-0980US	high7.5	4.94% (92nd)	—	no fix	2019-05-16	4 versions
CVE-2021-22946US	high7.5OT elevated	4.54% (92nd)	—	no fix	2021-09-29	≤ 3.1 on Red Hat Enterprise Linux
CVE-2019-0657US	medium5.9	4.52% (91st)	—	no fix	2019-03-05	4 versions
CVE-2022-38013US	—	4.04% (91st)	—	no fix	2022-09-13	≤ 3.1
CVE-2021-26423US	medium5.0	3.90% (90th)	—	no fix	2021-08-12	3 versions
CVE-2022-24464US	medium5.0	3.55% (89th)	—	no fix	2022-03-09	≤ 3.1
CVE-2021-24112US	high7.5	3.45% (89th)	—	no fix	2021-02-25	3 versions
CVE-2021-1721US	medium4.3	3.34% (89th)	—	no fix	2021-02-25	3 versions
CVE-2021-22947US	medium5.9OT elevated	3.01% (87th)	—	no fix	2021-09-29	≤ 3.1 on Red Hat Enterprise Linux
CVE-2022-34716US	—	2.50% (85th)	—	no fix	2022-08-09	≤ 3.1
CVE-2021-34485US	low2.1	2.07% (81st)	—	no fix	2021-08-12	2 versions
CVE-2022-24512US	medium6.8	1.61% (76th)	—	no fix	2022-03-09	≤ 3.1
CVE-2021-34532US	low2.1	1.22% (68th)	—	no fix	2021-08-12	3 versions
CVE-2022-41089US	high7.8	1.19% (68th)	—	no fix	2022-12-13	≤ 3.1
CVE-2021-31204US	medium4.6	1.19% (68th)	—	no fix	2021-05-11	≤ 3.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation17 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-19CWE-192 CVEs
CWE-264CWE-2642 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-1173Improper Use of Validation Framework1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan