Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
productUSA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
unpatched
by severity
1critical2high3medium0low
updated 2026-10-28
01
vulnerabilities (18)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2023-36899US | high8.8 | Exploit |
| CVE-2023-36049US | critical9.8 | — |
| CVE-2022-26832US | medium5.0 | — |
| CVE-2022-21911US | medium5.0 | — |
| CVE-2023-36560US | high8.8 | — |
| CVE-2023-29331US | — | — |
| CVE-2023-32030US | — | — |
| CVE-2023-24936US | — | — |
| CVE-2023-36873US | medium5.9 | — |
| CVE-2023-36796US | —OT elevated | — |
| CVE-2023-36794US | —OT elevated | — |
| CVE-2023-36793US | —OT elevated | — |
| CVE-2023-36792US | —OT elevated | — |
| CVE-2023-24897US | — | — |
| CVE-2023-24895US | — | — |
| CVE-2023-36788US | —OT elevated | — |
| CVE-2023-29326US | — | — |
| CVE-2022-41064US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-20Improper Input Validation15 CVEs
- CWE-311Missing Encryption of Sensitive Data5 CVEs
- CWE-264CWE-2643 CVEs
- CWE-787Out-of-bounds Write3 CVEs
- CWE-122Heap-based Buffer Overflow2 CVEs
- CWE-191Integer Underflow (Wrap or Wraparound)2 CVEs
- CWE-400Uncontrolled Resource Consumption2 CVEs
- CWE-190Integer Overflow or Wraparound1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USMicrosoft MSRC (CSAF)18 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan