Microsoft .NET 8.0
40 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-45591 | 8.0.0 – < 8.0.28 | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 2.5 % | ||
| CVE-2026-45491 | 8.0 – < 8.0.28 | .NET Tampering Vulnerability | MEDIUM 6.2 | 0.4 % | ||
| CVE-2026-45490 | 8.0.0 – < 8.0.28 | .NET SDK Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2026-42899 | 8.0.0 – < 8.0.27 | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 2.4 % | ||
| CVE-2026-32175 | 8.0.0 – < 8.0.27 | .NET Core Tampering Vulnerability | MEDIUM 4.3 | 0.7 % | ||
| CVE-2026-35433 | 8.0.0 – < 8.0.27 | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 0.8 % | ||
| CVE-2026-32177 | 8.0.0 – < 8.0.27 | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 0.6 % | ||
| CVE-2026-32203 | 8.0.0 – < 8.0.26 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 1.9 % | ||
| CVE-2026-26171 | 8.0.0 – < 8.0.26 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.8 % | ||
| CVE-2026-33116 | 8.0 – < 8.0.26 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.1 % | ||
| CVE-2026-32178 | 8.0 – < 8.0.26 | .NET Spoofing Vulnerability | HIGH 7.5 | 2.3 % | ||
| CVE-2026-21218 | 8.0.0 – < 8.0.24 | .NET Spoofing Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2025-55248 | 8.0.0 – < 8.0.21 | .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability | MEDIUM 5.7 | 0.7 % | ||
| CVE-2025-55247 | 8.0.0 – < 8.0.21 | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 0.6 % | ||
| CVE-2025-30399 | 8.0.0 – < 8.0.17 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.5 | 1.1 % | ||
| CVE-2025-26646 | 8.0.0 – < 8.0.16 | .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability | HIGH 8.0 | 1.3 % | ||
| CVE-2025-21172 | 8.0.0 – < 8.0.12 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 7.5 | 1.8 % | ||
| CVE-2025-21173 | 8.0.0 – < 8.0.12 | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 1.3 % | ||
| CVE-2025-21176 | 8.0.0 – < 8.0.12 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 8.8 | 2.4 % | ||
| CVE-2024-43485 | 8.0.0 – < 8.0.10 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.1 % | ||
| CVE-2024-43484 | 8.0.0 – < 8.0.10 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.0 % | ||
| CVE-2024-43483 | 8.0.0 – < 8.0.10 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.9 % | ||
| CVE-2024-38229 | 8.0.0 – < 8.0.10 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 8.1 | 2.1 % | ||
| CVE-2024-38168 | 8.0 – < 8.0.8 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.7 % | ||
| CVE-2024-38167 | 8.0 – < 8.0.8 | .NET and Visual Studio Information Disclosure Vulnerability | MEDIUM 6.5 | 1.4 % | ||
| CVE-2024-38095 | 8.0 – < 8.0.7 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.7 % | ||
| CVE-2024-30105 | 8.0 – < 8.0.7 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 2.9 % | ||
| CVE-2024-35264 | 1.0.0 – < 8.0.7 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 8.1 | 2.6 % | ||
| CVE-2024-30046 | 8.0 – < 8.0.5 | Visual Studio Denial of Service Vulnerability | MEDIUM 5.9 | 1.7 % | ||
| CVE-2024-30045 | 8.0 – < 8.0.5 | .NET and Visual Studio Remote Code Execution Vulnerability | MEDIUM 6.3 | 1.2 % | ||
| CVE-2024-21409 | | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | HIGH 7.3 | 2.5 % | ||
| CVE-2024-26190 | | Microsoft QUIC Denial of Service Vulnerability | HIGH 7.5 | 3.0 % | ||
| CVE-2024-21392 | 8.0 – < 8.0.3 | .NET and Visual Studio Denial of Service Vulnerability | HIGH 7.5 | 3.1 % | ||
| CVE-2024-21404 | 8.0 – < 8.0.2 | .NET Denial of Service Vulnerability | HIGH 7.5 | 2.7 % | ||
| CVE-2024-21319 | | Microsoft Identity Denial of service vulnerability | MEDIUM 6.8 | 2.9 % | ||
| CVE-2024-0057 | 8.0 – < 8.0.1 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability | CRITICAL 9.8 | 2.8 % | ||
| CVE-2024-0056 | 8.0 – < 8.0.1 | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability | HIGH 8.7 | 1.2 % | ||
| CVE-2023-36038 | | ASP.NET Core Denial of Service Vulnerability | HIGH 8.2 | 2.8 % | ||
| CVE-2023-36558 | 8.0 – < 8.0.0 | ASP.NET Core Security Feature Bypass Vulnerability | MEDIUM 6.2 | 1.1 % | ||
| CVE-2023-36049 | 8.0 – < 8.0.0 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | CRITICAL 9.8 | 6.8 % |