Microsoft Microsoft .NET Framework 4.6.2

Name: Microsoft Microsoft .NET Framework 4.6.2
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical6high3medium0low

updated 2026-10-27

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-29059US	—OT critical	98.6% (100th)	KEV	4.7.04081.03	2024-03-23	4.7.0 → 4.7.04081.03
CVE-2023-36899US	high8.8	76.7% (100th)	Exploit	4.7.04057.05	2023-08-08	4.7.0 → 4.7.04057.05
CVE-2025-55315US	—	66.5% (99th)	Exploit	no fix	2025-10-14	≤ vers:unknown/*
CVE-2024-21409US	—	2.51% (85th)	Exploit	4.7.4092.0	2024-04-09	4.7.0 → 4.7.4092.0
CVE-2023-36049US	critical9.8	6.79% (94th)	—	4.7.4076.0	2023-11-14	4.7.0 → 4.7.4076.0
CVE-2022-30130US	medium4.3	3.15% (88th)	—	4.7.03946.07	2022-05-10	4.7.0 → 4.7.03946.07
CVE-2024-43484US	—	2.96% (87th)	—	4.7.04115.01	2024-10-08	4.7.0 → 4.7.04115.01
CVE-2023-36560US	high8.8	2.91% (87th)	—	4.7.4076.0	2023-11-14	4.7.0 → 4.7.4076.0
CVE-2024-43483US	—	2.90% (87th)	—	4.7.04115.01	2024-10-08	4.7.0 → 4.7.04115.01
CVE-2023-29331US	—	2.63% (85th)	—	4.7.04043.0	2023-06-14	4.7.0 → 4.7.04043.0
CVE-2025-21176US	—	2.38% (84th)	—	4.7.04126.01	2025-01-14	3 versions
CVE-2023-32030US	—	2.22% (83rd)	—	4.7.04043.0	2023-06-14	4.7.0 → 4.7.04043.0
CVE-2023-24936US	—	1.56% (75th)	—	4.7.04043.0	2023-06-14	4.7.0 → 4.7.04043.0
CVE-2023-36873US	medium5.9	1.50% (74th)	—	4.7.04057.05	2023-08-08	4.7.0 → 4.7.04057.05
CVE-2024-38081US	—	1.30% (70th)	—	4.7.4101.01	2024-07-09	4.7.0 → 4.7.4101.01
CVE-2023-36796US	—OT elevated	1.23% (69th)	—	4.7.04063.01	2023-09-12	4.7.0 → 4.7.04063.01
CVE-2023-36794US	—OT elevated	1.23% (69th)	—	4.7.04063.01	2023-09-12	4.7.0 → 4.7.04063.01
CVE-2023-36793US	—OT elevated	1.23% (69th)	—	4.7.04063.01	2023-09-12	4.7.0 → 4.7.04063.01
CVE-2023-36792US	—OT elevated	1.23% (69th)	—	4.7.04063.01	2023-09-12	4.7.0 → 4.7.04063.01
CVE-2022-41089US	high7.8	1.19% (68th)	—	04010.02	2022-12-13	4.7.0 → 04010.02
CVE-2023-24897US	—	1.18% (68th)	—	4.7.04043.0	2023-06-14	4.7.0 → 4.7.04043.0
CVE-2023-21808US	—OT elevated	1.15% (67th)	—	4.7.04038.06	2023-02-14	4.7.0 → 4.7.04038.06
CVE-2023-24895US	—	1.06% (64th)	—	4.7.04043.0	2023-06-14	4.7.0 → 4.7.04043.0
CVE-2023-21722US	—	0.92% (60th)	—	4.7.04038.06	2023-02-14	4.7.0 → 4.7.04038.06
CVE-2022-41064US	—	0.84% (58th)	—	4.7.04005.02	2022-11-09	4.7.0 → 4.7.04005.02
CVE-2025-55248US	medium5.7	0.72% (54th)	—	4.7.04137.03	2025-10-14	4 versions
CVE-2025-55247US	high7.3	0.61% (49th)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2025-25004US	high7.3	0.48% (41st)	—	no fix	2025-10-14	≤ vers:unknown/*
CVE-2025-54132US	high7.5	0.38% (32nd)	—	no fix	2025-08-01	≤ vers:unknown/*
CVE-2025-55240US	—	0.37% (30th)	—	no fix	2025-10-14	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation16 CVEs
CWE-311Missing Encryption of Sensitive Data4 CVEs
CWE-264CWE-2643 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)25 CVEs
NLNCSC-NL (CSAF)6 CVEs
USMicrosoft MSRC (CSAF)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan