.net Framework vulnerabilities
6 known vulnerabilities in .net Framework from Microsoft. 6 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Microsoft .NET Framework 3.5 AND 4.7.2: Loop with Unreachable Exit Condition
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- 7.5 High severity
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio…
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
- 7.5 High severity
Microsoft .NET Framework Information Disclosure Exploited
.NET Framework Information Disclosure Vulnerability
- 9.8 Critical severity
Microsoft .NET Framework Remote Code Execution Exploited
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
- 7.8 High severity
Microsoft .NET Framework Remote Code Execution Exploited
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
- 9.3 High severity
Microsoft Windows Remote Code Execution Exploited
The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before