Microsoft .NET Framework 3.5 vulnerabilities

4 known vulnerabilities in Microsoft .NET Framework 3.5 from Microsoft. 4 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio…

  CVE-2026-33116Apr 14, 2026MicrosoftEPSS 2.23%

  Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

• 7.5 High severity

  Microsoft .NET Framework Information Disclosure Exploited

  CVE-2024-29059Mar 23, 2024MicrosoftEPSS 98.6%

  .NET Framework Information Disclosure Vulnerability

• 7.8 High severity

  Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Exploited

  CVE-2020-1147Jul 14, 2020MicrosoftEPSS 95.8%

  A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulner

• 9.8 Critical severity

  Microsoft .NET Framework Remote Code Execution Exploited

  CVE-2020-0646Jan 14, 2020MicrosoftEPSS 99.2%

  A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.