Microsoft Microsoft .NET Framework 4.6

Name: Microsoft Microsoft .NET Framework 4.6
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical11high7medium0low

updated 2026-10-28

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-0646US	critical9.8OT critical	99.2% (100th)	KEV	no fix	2020-01-14	2 versions
CVE-2020-1147US	high7.8OT critical	94.0% (100th)	KEV	no fix	2020-07-14	2 versions
CVE-2019-1083US	high7.5	7.80% (95th)	Exploit	no fix	2019-07-15	2 versions
CVE-2019-1006US	high7.5	6.07% (93rd)	Exploit	no fix	2019-07-15	2 versions
CVE-2020-0606US	high8.8	17.2% (97th)	—	no fix	2020-01-14	2 versions
CVE-2020-0605US	high8.8	17.1% (97th)	—	no fix	2020-01-14	2 versions
CVE-2019-0613US	high8.8	15.4% (97th)	—	no fix	2019-03-05	2 versions
CVE-2019-1113US	high8.8	10.00% (96th)	—	no fix	2019-07-15	2 versions
CVE-2020-1108US	high7.5	6.46% (94th)	—	no fix	2020-05-21	2 versions
CVE-2019-0820US	high7.5	5.72% (93rd)	—	no fix	2019-05-16	2 versions
CVE-2019-0981US	high7.5	4.94% (92nd)	—	no fix	2019-05-16	2 versions
CVE-2019-0980US	high7.5	4.94% (92nd)	—	no fix	2019-05-16	2 versions
CVE-2019-0657US	medium5.9	4.52% (91st)	—	no fix	2019-03-05	2 versions
CVE-2021-24111US	medium5.0	3.84% (90th)	—	publication	2021-02-25	4.0.0.0 → publication
CVE-2022-26832US	medium5.0	3.61% (89th)	—	4.0.52732.36732	2022-04-15	4.0.0.0 → 4.0.52732.36732
CVE-2020-16937US	medium4.3	3.29% (88th)	—	publication	2020-10-16	4.0.0.0 → publication
CVE-2022-21911US	medium5.0	3.05% (88th)	—	4.7.3905.0	2022-01-11	4.0.0.0 → 4.7.3905.0
CVE-2019-0864US	medium5.5	1.35% (71st)	—	no fix	2019-05-16	2 versions
CVE-2020-1476US	medium5.5	1.13% (66th)	—	publication	2020-08-17	4.0.0.0 → publication

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation10 CVEs
CWE-19CWE-194 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-91XML Injection (aka Blind XPath Injection)2 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-269Improper Privilege Management1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.