Microsoft .NET

Name: Microsoft .NET
Brand: Microsoft

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical7high5medium0low

updated 2026-10-28

vulnerabilities (58)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-114148US	—OT elevated	—	Exploit	no fix	—	≤ source-build Linux tarballs (all archive types)
CVE-2026-50649US	—	4.02% (91st)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50646US	—	4.02% (91st)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-26130US	—	2.99% (87th)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2026-26127US	—	2.13% (82nd)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2026-62901US	—	1.23% (69th)	—	no fix	2026-08-11	6 versions
CVE-2026-50524US	—	1.23% (69th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50651US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50648US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50527US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50525US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-47302US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-57108US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-56170US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50506US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-45646US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-62898US	—	1.03% (64th)	—	no fix	2026-08-11	6 versions
CVE-2026-70337US	—	0.94% (61st)	—	no fix	2026-08-11	6 versions
CVE-2026-47285US	—	0.92% (60th)	—	no fix	2026-08-11	6 versions
CVE-2026-58612US	high7.5	0.87% (59th)	—	no fix	2026-08-11	6 versions
CVE-2026-62902US	—	0.87% (59th)	—	no fix	2026-08-11	6 versions
CVE-2026-47282US	—	0.87% (59th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-69320US	—	0.86% (58th)	—	no fix	2026-08-11	6 versions
CVE-2026-41109US	—	0.86% (58th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-47303US	—OT elevated	0.84% (58th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-57102US	—	0.82% (57th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-70336US	high8.8	0.82% (57th)	—	no fix	2026-08-11	6 versions
CVE-2026-62872US	—OT elevated	0.78% (56th)	—	no fix	2026-08-11	6 versions
CVE-2026-47300US	—	0.78% (56th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-59113US	—OT elevated	0.76% (55th)	—	no fix	2026-08-11	6 versions
CVE-2026-62900US	—	0.75% (55th)	—	no fix	2026-08-11	6 versions
CVE-2026-62899US	—	0.75% (55th)	—	no fix	2026-08-11	6 versions
CVE-2026-50659US	—	0.74% (54th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-65675US	medium6.5OT elevated	0.64% (50th)	—	no fix	2026-08-11	6 versions
CVE-2026-50528US	—OT elevated	0.61% (49th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-69306US	—	0.54% (45th)	—	no fix	2026-08-11	6 versions
CVE-2026-57101US	medium6.1	0.48% (41st)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-45496US	medium5.5	0.47% (41st)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-62886US	—	0.47% (40th)	—	no fix	2026-08-11	6 versions
CVE-2026-62871US	—	0.47% (40th)	—	no fix	2026-08-11	6 versions
CVE-2026-58641US	—	0.47% (40th)	—	no fix	2026-08-11	6 versions
CVE-2026-54981US	—	0.47% (40th)	—	no fix	2026-08-11	6 versions
CVE-2026-47305US	—	0.47% (40th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-70335US	—	0.46% (40th)	—	no fix	2026-08-11	6 versions
CVE-2026-50650US	—	0.46% (40th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-65810US	high7.8	0.40% (35th)	—	no fix	2026-08-11	6 versions
CVE-2026-59119US	—OT elevated	0.38% (32nd)	—	no fix	2026-08-11	6 versions
CVE-2026-26131US	—OT elevated	0.37% (31st)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2026-62897US	—	0.37% (31st)	—	no fix	2026-08-11	6 versions
CVE-2026-70354US	high7.8	0.36% (30th)	—	no fix	2026-08-11	6 versions

showing 50 of 58

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling8 CVEs
CWE-693Protection Mechanism Failure5 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-276Incorrect Default Permissions3 CVEs
CWE-829Inclusion of Functionality from Untrusted Control Sphere3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)29 CVEs
NLNCSC-NL (CSAF)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan