Microsoft Microsoft .NET Framework 2.0 Service Pack 2

Name: Microsoft Microsoft .NET Framework 2.0 Service Pack 2
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical7high5medium0low

updated 2026-10-27

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-29059US	—OT critical	98.6% (100th)	KEV	3.0.50727.8976	2024-03-23	2.0.0 → 3.0.50727.8976
CVE-2023-36899US	high8.8	76.7% (100th)	Exploit	2.0.50727.8974	2023-08-08	2.0.0 → 2.0.50727.8974
CVE-2025-55315US	—	66.5% (99th)	Exploit	no fix	2025-10-14	≤ vers:unknown/*
CVE-2023-36049US	critical9.8	6.79% (94th)	—	3.0.50727.8975	2023-11-14	2.0.0 → 3.0.50727.8975
CVE-2020-1046US	high7.8	3.76% (90th)	—	publication	2020-08-17	2.0.0 → publication
CVE-2022-26832US	medium5.0	3.61% (89th)	—	2.0.50727.8962	2022-04-15	2.0.0 → 2.0.50727.8962
CVE-2020-16937US	medium4.3	3.29% (88th)	—	publication	2020-10-16	2.0.0 → publication
CVE-2022-21911US	medium5.0	3.05% (88th)	—	2.0.50727.8955	2022-01-11	2.0.0 → 2.0.50727.8955
CVE-2024-43484US	—	2.96% (87th)	—	3.0.30729.8974	2024-10-08	2.0.0 → 3.0.30729.8974
CVE-2023-36560US	high8.8	2.91% (87th)	—	3.0.50727.8975	2023-11-14	2.0.0 → 3.0.50727.8975
CVE-2024-43483US	—	2.90% (87th)	—	3.0.30729.8974	2024-10-08	2.0.0 → 3.0.30729.8974
CVE-2024-0057US	critical9.8	2.78% (86th)	—	3.0.50727.8976	2024-01-09	2.0.0 → 3.0.50727.8976
CVE-2023-29331US	—	2.63% (85th)	—	3.0.6920.8954; 2.0.50727.8970	2023-06-14	2.0.0 → 3.0.6920.8954; 2.0.50727.8970
CVE-2023-32030US	—	2.22% (83rd)	—	10.0.14393.5989	2023-06-14	2.0.0 → 10.0.14393.5989
CVE-2023-24936US	—	1.56% (75th)	—	3.0.6920.8954; 2.0.50727.8970	2023-06-14	2.0.0 → 3.0.6920.8954; 2.0.50727.8970
CVE-2024-38081US	—	1.30% (70th)	—	2.0.50727.8977	2024-07-09	2.0.0 → 2.0.50727.8977
CVE-2023-36796US	—OT elevated	1.23% (69th)	—	3.0.30729.8957	2023-09-12	2.0.0 → 3.0.30729.8957
CVE-2023-36794US	—OT elevated	1.23% (69th)	—	3.0.30729.8957	2023-09-12	2.0.0 → 3.0.30729.8957
CVE-2023-36793US	—OT elevated	1.23% (69th)	—	3.0.30729.8957	2023-09-12	2.0.0 → 3.0.30729.8957
CVE-2023-36792US	—OT elevated	1.23% (69th)	—	3.0.30729.8957	2023-09-12	2.0.0 → 3.0.30729.8957
CVE-2022-41089US	high7.8	1.19% (68th)	—	30729.8953	2022-12-13	2.0.0 → 30729.8953
CVE-2024-0056US	—OT elevated	1.18% (68th)	—	3.0.50727.8976	2024-01-09	2.0.0 → 3.0.50727.8976
CVE-2020-1476US	medium5.5	1.13% (66th)	—	publication	2020-08-17	2.0.0 → publication
CVE-2023-24895US	—	1.06% (64th)	—	3.0.6920.8954; 2.0.50727.8970	2023-06-14	2.0.0 → 3.0.6920.8954; 2.0.50727.8970
CVE-2023-36788US	—OT elevated	1.02% (63rd)	—	3.0.30729.8957	2023-09-12	2.0.0 → 3.0.30729.8957
CVE-2023-21722US	—	0.92% (60th)	—	2.0.50727.8966	2023-02-14	2.0.0 → 2.0.50727.8966
CVE-2023-29326US	—	0.90% (59th)	—	3.0.6920.8954; 2.0.50727.8970	2023-06-14	2.0.0 → 3.0.6920.8954; 2.0.50727.8970
CVE-2025-55248US	medium5.7	0.72% (54th)	—	2.0.50727.8981	2025-10-14	4 versions
CVE-2025-55247US	high7.3	0.61% (49th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2025-25004US	high7.3	0.48% (41st)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2025-54132US	high7.5	0.38% (32nd)	—	no fix	2025-08-01	≤ vers:unknown/*
CVE-2025-55240US	—	0.37% (30th)	—	no fix	2025-10-14	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation16 CVEs
CWE-311Missing Encryption of Sensitive Data5 CVEs
CWE-254CWE-2543 CVEs
CWE-264CWE-2643 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)27 CVEs
NLNCSC-NL (CSAF)6 CVEs
USMicrosoft MSRC (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan