.NET Core 3.1

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

critical

by severity

0critical2high7medium1low

updated 2026-10-27

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-29117US	medium5.0	5.73% (93rd)	Exploit	3.1.25	2022-05-10	2 versions
CVE-2022-41032US	high7.8	1.29% (70th)	Exploit	3.1.30	2022-10-11	2 versions
CVE-2022-30184US	medium4.3	5.70% (93rd)	—	3.1.26	2022-06-15	2 versions
CVE-2022-23267US	medium5.0	5.70% (93rd)	—	3.1.25	2022-05-10	2 versions
CVE-2022-29145US	medium5.0	5.54% (93rd)	—	3.1.25	2022-05-10	2 versions
CVE-2022-38013US	—	4.04% (91st)	—	3.1.29	2022-09-13	2 versions
CVE-2021-26423US	medium5.0	3.90% (90th)	—	3.1.18	2021-08-12	2 versions
CVE-2022-24464US	medium5.0	3.55% (89th)	—	3.1.23	2022-03-09	2 versions
CVE-2022-34716US	—	2.50% (85th)	—	3.1.28	2022-08-09	2 versions
CVE-2021-34485US	low2.1	2.07% (81st)	—	3.1.18	2021-08-12	2 versions
CVE-2022-24512US	medium6.8	1.61% (76th)	—	3.1.23	2022-03-09	2 versions
CVE-2022-41089US	high7.8	1.19% (68th)	—	3.1.32	2022-12-13	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-1173Improper Use of Validation Framework1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-212Improper Removal of Sensitive Information Before Storage or Transfer1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.