Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Microsoft

Microsoft .NET Core vulnerabilities

13 published CVEs name Microsoft .NET Core among the affected products; CISA lists 1 of them as exploited in the wild.

Published CVEs
13
Last 12 months
0
Critical
0
Known exploited
1

Critical 0High 10Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20184
  2. 20196
  3. 20203

Known exploitedNewest addition to KEV first

  • CVE-2020-1147

    A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of…

    Microsoft · Microsoft SharePoint Enterprise Server

    ExploitedHigh7.8

Newest CVEs

  • CVE-2020-1147

    A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of…

    Microsoft · Microsoft SharePoint Enterprise Server

    ExploitedHigh7.8
  • CVE-2020-0606

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully…

    Microsoft · .NET Core

    High8.8
  • CVE-2020-0605

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully…

    Microsoft · .NET Core

    High8.8
  • CVE-2019-1301

    A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'.

    Microsoft · .NET Core

    High7.5
  • CVE-2019-0981

    A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service…

    Microsoft · Microsoft .NET Framework 4.5.2

    High7.5
  • CVE-2019-0980

    A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service…

    Microsoft · Microsoft .NET Framework 4.5.2

    High7.5
  • CVE-2019-0820

    A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of…

    Microsoft · Microsoft .NET Framework 4.5.2

    High7.5
  • CVE-2019-0657

    A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing…

    Microsoft · Microsoft .NET Framework 4.5.2

    Medium5.9
  • CVE-2019-0545

    An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka…

    Microsoft · .NET Core

    High7.5
  • CVE-2018-8416

    A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

    Microsoft · .NET Core

    Medium6.5