Microsoft .NET 8.0 installed on Windows

Name: Microsoft .NET 8.0 installed on Windows
Brand: Microsoft

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

6critical68high26medium1low

updated 2026-10-28

vulnerabilities (173)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-96230US	high8.8	0.95% (61st)	Exploit	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-42826US	high7.5	0.84% (58th)	Exploit	no fix	2026-05-07	≤ vers:unknown/*
CVE-2026-114148US	—OT elevated	—	Exploit	8.0.427	—	2 versions
CVE-2026-50649US	—	4.02% (91st)	—	8.0.29	2026-07-14	3 versions
CVE-2026-50646US	—	4.02% (91st)	—	8.0.29	2026-07-14	3 versions
CVE-2026-45591US	—	2.48% (85th)	—	8.0.28	2026-06-09	3 versions
CVE-2026-42899US	—	2.43% (84th)	—	8.0.27	2026-05-12	3 versions
CVE-2025-21176US	—	2.38% (84th)	—	8.0.12	2025-01-14	2 versions
CVE-2026-32178US	—	2.28% (83rd)	—	8.0.26	2026-04-14	3 versions
CVE-2026-33116US	—	2.14% (82nd)	—	8.0.26	2026-04-14	3 versions
CVE-2026-32203US	—	1.90% (80th)	—	8.0.26	2026-04-14	3 versions
CVE-2025-21172US	—	1.84% (79th)	—	8.0.12	2025-01-14	2 versions
CVE-2026-26171US	—	1.75% (78th)	—	8.0.26	2026-04-14	3 versions
CVE-2026-105016US	critical9.8	1.66% (77th)	—	8.0.32	2026-10-13	2 versions
CVE-2026-21518US	—	1.46% (73rd)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-83520US	high8.8	1.44% (73rd)	—	8.0.32	2026-10-13	3 versions
CVE-2026-70035US	high8.8	1.44% (73rd)	—	8.0.32	2026-10-13	3 versions
CVE-2026-23666US	—	1.33% (71st)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-69651US	high7.5	1.25% (69th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-58280US	high7.5	1.25% (69th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-62901US	—	1.23% (69th)	—	8.0.30	2026-08-11	3 versions
CVE-2026-50524US	—	1.23% (69th)	—	8.0.29	2026-07-14	3 versions
CVE-2026-70181US	high7.5	1.23% (69th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-70159US	high7.5	1.23% (69th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-96960US	high7.5	1.20% (68th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-96958US	high7.5	1.20% (68th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-21256US	—	1.18% (67th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-57099US	high7.5	1.17% (67th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-50651US	—	1.17% (67th)	—	8.0.29	2026-07-14	3 versions
CVE-2026-50648US	—	1.17% (67th)	—	8.0.29	2026-07-14	3 versions
CVE-2026-50527US	—	1.17% (67th)	—	8.0.29	2026-07-14	3 versions
CVE-2026-50525US	—	1.17% (67th)	—	8.0.29	2026-07-14	3 versions
CVE-2026-47302US	—	1.17% (67th)	—	8.0.29	2026-07-14	3 versions
CVE-2026-57108US	—	1.17% (67th)	—	8.0.29	2026-07-14	3 versions
CVE-2026-56170US	—	1.17% (67th)	—	8.0.29	2026-07-14	3 versions
CVE-2026-50506US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-45646US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-96236US	high7.5	1.09% (65th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-102229US	medium6.8	1.06% (64th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-78461US	high7.4	1.04% (64th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-62898US	—	1.03% (64th)	—	8.0.30	2026-08-11	2 versions
CVE-2026-47284US	—	1.01% (63rd)	—	no fix	2026-06-09	≤ vers:unknown/*
CVE-2026-21218US	—	1.01% (63rd)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-103572US	high8.8	0.99% (63rd)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-96233US	high7.5	0.99% (62nd)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-84008US	high7.5	0.99% (62nd)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-96959US	high7.5	0.97% (62nd)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-70186US	high7.5	0.96% (61st)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-96229US	medium6.5	0.95% (61st)	—	8.0.32	2026-10-13	3 versions
CVE-2026-70337US	—	0.94% (61st)	—	no fix	2026-08-11	≤ vers:unknown/*

showing 50 of 173

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling13 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')11 CVEs
CWE-787Out-of-bounds Write10 CVEs
CWE-122Heap-based Buffer Overflow9 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')9 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')9 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')8 CVEs
CWE-20Improper Input Validation7 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)164 CVEs
USMicrosoft MSRC (CSAF)51 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan