.NET 9.0 vulnerabilities

2 known vulnerabilities in .NET 9.0 from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio…

  CVE-2026-33116Apr 14, 2026MicrosoftEPSS 2.23%

  Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

• 8.0 High severity

  .NET 8.0: External Control of File Name or Path

  CVE-2025-26646May 13, 2025MicrosoftEPSS 1.29%

  External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.