Microsoft .NET 6.0
48 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-36855 | 6.0.0 – < 6.0.36 | EOL .NET 6.0 Runtime Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2025-36854 | 6.0.0 – 6.0.36 | EOL ASP.NET 6.0 Remote Code Execution Vulnerability | HIGH 8.1 | 0.6 % | ||
| CVE-2025-36853 | 6.0.0 – < 6.0.36 | EOL .NET 6.0 Runtime Remote Code Execution Vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2024-43485 | 6.0.0 – < 6.0.35 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.1 % | ||
| CVE-2024-43484 | 6.0.0 – < 6.0.35 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.0 % | ||
| CVE-2024-43483 | 6.0.0 – < 6.0.35 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.9 % | ||
| CVE-2024-38095 | 6.0.0 – < 6.0.32 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.7 % | ||
| CVE-2024-38081 | 6.0.0 – < 6.0.32 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 1.3 % | ||
| CVE-2024-35264 | - | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 8.1 | 2.6 % | ||
| CVE-2024-21409 | | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.3 | 2.5 % | ||
| CVE-2024-21404 | 6.0.0 – < 6.0.27 | .NET Denial of Service Vulnerability | HIGH 7.5 | 2.7 % | ||
| CVE-2024-21319 | 6.0.0 – < 6.0.26 | Microsoft Identity Denial of service vulnerability | MEDIUM 6.8 | 2.9 % | ||
| CVE-2024-0057 | 6.0.0 – < 6.0.26 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability | CRITICAL 9.8 | 2.8 % | ||
| CVE-2024-20672 | 6.0.0 – < 6.0.26 | .NET Denial of Service Vulnerability | HIGH 7.5 | 2.9 % | ||
| CVE-2024-0056 | 6.0.0 – < 6.0.26 | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability | HIGH 8.7 | 1.2 % | ||
| CVE-2023-36558 | 6.0.0 – < 6.0.25 | ASP.NET Core Security Feature Bypass Vulnerability | MEDIUM 6.2 | 1.1 % | ||
| CVE-2023-36049 | | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | CRITICAL 9.8 | 6.8 % | ||
| CVE-2023-36793 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36792 | 6.0.0 – < 6.0.24 | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36796 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36794 | | Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-36799 | 6.0.0 – < 6.0.24 | .NET Core and Visual Studio Denial of Service Vulnerability | MEDIUM 6.5 | 4.6 % | ||
| CVE-2023-38180 | 6.0.0 – < 6.0.21 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 14 % | KEV | |
| CVE-2023-35391 | 6.0.0 – < 6.0.21 | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability | HIGH 7.5 | 1.9 % | ||
| CVE-2023-38178 | 6.0.0 – < 6.0.21 | .NET Core and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.6 % | ||
| CVE-2023-35390 | 6.0.0 – < 6.0.21 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 2.1 % | ||
| CVE-2023-33170 | 6.0.0 – < 6.0.20 | ASP.NET and Visual Studio Security Feature Bypass Vulnerability | HIGH 8.1 | 2.0 % | ||
| CVE-2023-33127 | 6.0.0 – < 6.0.20 | .NET and Visual Studio Elevation of Privilege Vulnerability | HIGH 8.1 | 1.9 % | ||
| CVE-2023-29331 | 6.0.0 – < 6.0.18 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.6 % | ||
| CVE-2023-24936 | 6.0.0 – < 6.0.18 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.5 | 1.6 % | ||
| CVE-2023-24897 | | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2023-33135 | 6.0.0 – < 6.0.18 | .NET and Visual Studio Elevation of Privilege Vulnerability | HIGH 7.3 | 1.0 % | ||
| CVE-2023-33128 | 6.0.0 – < 6.0.18 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.3 | 1.0 % | ||
| CVE-2023-33126 | 6.0.0 – < 6.0.18 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.3 | 1.0 % | ||
| CVE-2023-28260 | 6.0.0 – < 6.0.16 | .NET DLL Hijacking Remote Code Execution Vulnerability | HIGH 7.8 | 1.5 % | ||
| CVE-2023-21808 | 6.0.0 – < 6.0.14 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.8 | 1.1 % | ||
| CVE-2023-21538 | 6.0.0 – < 6.0.13 | .NET Denial of Service Vulnerability | HIGH 7.5 | 2.8 % | ||
| CVE-2022-41089 | 6.0.0 – < 6.0.12 | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 1.2 % | ||
| CVE-2022-41032 | 6.0.0 – < 6.0.10 | NuGet Client Elevation of Privilege Vulnerability | HIGH 7.8 | 1.3 % | ||
| CVE-2022-38013 | 6.0.0 – < 6.0.9 | .NET Core and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 4.0 % | ||
| CVE-2022-34716 | | .NET Spoofing Vulnerability | MEDIUM 5.9 | 2.5 % | ||
| CVE-2022-30184 | 6.0.0 – < 6.0.6 | .NET and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.5 | 5.7 % | ||
| CVE-2022-29145 | 6.0.0 – < 6.0.5 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 5.5 % | ||
| CVE-2022-29117 | 6.0.0 – < 6.0.5 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 5.7 % | ||
| CVE-2022-23267 | | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 5.7 % | ||
| CVE-2022-24512 | | .NET and Visual Studio Remote Code Execution Vulnerability | MEDIUM 6.3 | 1.6 % | ||
| CVE-2022-24464 | 6.0.0 – < 6.0.3 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.6 % | ||
| CVE-2022-21986 | | .NET Denial of Service Vulnerability | HIGH 7.5 | 3.7 % |