Microsoft .NET 9.0 runtime
50 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-105016 | 9.0.0 – < 9.0.21 | Microsoft QUIC Remote Code Execution Vulnerability | CRITICAL 9.8 | 1.7 % | ||
| CVE-2026-58280 | 9.0.0 – < 9.0.21 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-96238 | 9.0.0 – < 9.0.122 | .NET Security Feature Bypass Vulnerability | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-96237 | 9.0.0 – < 9.0.319 | .NET Remote Code Execution Vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2026-96235 | 9.0.0 – < 9.0.21 | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-96234 | 9.0.0 – < 9.0.21 | .NET Information Disclosure Vulnerability | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-96233 | 9.0.0 – < 9.0.21 | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2026-96232 | 9.0.0 – < 9.0.21 | .NET Information Disclosure Vulnerability | HIGH 7.5 | 0.9 % | ||
| CVE-2026-96231 | 9.0.0 – < 9.0.21 | .NET Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2026-96229 | 9.0.0 – < 9.0.21 | .NET Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2026-96225 | 9.0.0 – < 9.0.21 | .NET Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2026-85363 | 9.0.0 – < 9.0.21 | .NET Framework Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-83520 | 9.0.0 – < 9.0.21 | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 1.4 % | ||
| CVE-2026-70035 | 9.0.0 – < 9.0.21 | .NET Framework Remote Code Execution Vulnerability | HIGH 8.8 | 1.4 % | ||
| CVE-2026-70007 | 9.0.0 – < 9.0.21 | .NET Framework Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-96224 | 9.0.0 – < 9.0.21 | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-70197 | | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH 8.1 | 0.8 % | ||
| CVE-2026-70190 | 9.0.0 – < 9.0.319, 9.0.122 | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 0.5 % | ||
| CVE-2026-70165 | 9.0.0 – < 9.0.319, 9.0.122 | .NET Elevation of Privilege Vulnerability | MEDIUM 6.7 | 0.4 % | ||
| CVE-2026-70161 | 9.0.0 – < 9.0.319, 9.0.122 | .NET Elevation of Privilege Vulnerability | HIGH 7.3 | 0.5 % | ||
| CVE-2026-70174 | 9.0.0 – < 9.0.21 | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-87697 | 9.0.0 – < 9.0.21 | .NET Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-69651 | 9.0.0 – < 9.0.21 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-66822 | 9.0.0 – < 9.0.21 | .NET Information Disclosure Vulnerability | MEDIUM 5.9 | 0.8 % | ||
| CVE-2026-62898 | 9.0.0 – < 9.0.19 | Microsoft QUIC Information Disclosure Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2026-70354 | 9.0.0 – < 9.0.19 | .NET Core Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2026-62871 | 9.0.0 – < 9.0.19 | .NET Elevation of Privilege Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2026-62909 | 9.0.0 – < 9.0.19 | .NET Elevation of Privilege Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-62902 | 9.0.0 – < 9.0.19 | .NET Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2026-62901 | 9.0.0 – < 9.0.19 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-62900 | 9.0.0 – < 9.0.19 | .NET Information Disclosure Vulnerability | MEDIUM 5.9 | 0.7 % | ||
| CVE-2026-62899 | 9.0.0 – < 9.0.19 | .NET Security Feature Bypass Vulnerability | MEDIUM 5.9 | 0.7 % | ||
| CVE-2026-62897 | 9.0.0 – < 9.0.19 | .NET Framework Remote Code Execution Vulnerability | HIGH 7.0 | 0.4 % | ||
| CVE-2026-50659 | 9.0.0 – < 9.0.18 | .NET Spoofing Vulnerability | MEDIUM 6.5 | 0.7 % | ||
| CVE-2026-50651 | 9.0.0 – < 9.0.18 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50650 | 9.0.0 – < 9.0.18 | .NET Framework Elevation of Privilege Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2026-50649 | 9.0.0 – < 9.0.18 | .NET Remote Code Execution Vulnerability | HIGH 7.8 | 4.0 % | ||
| CVE-2026-50648 | 9.0.0 – < 9.0.18 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50646 | 9.0.0 – < 9.0.18 | .NET Framework Remote Code Execution Vulnerability | HIGH 7.8 | 4.0 % | ||
| CVE-2026-50528 | 9.0.0 – < 9.0.18 | .NET Security Feature Bypass Vulnerability | HIGH 8.2 | 0.6 % | ||
| CVE-2026-50527 | 9.0.0 – < 9.0.18 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50526 | 9.0.0 – < 9.0.18 | .NET Tampering Vulnerability | HIGH 7.0 | 0.2 % | ||
| CVE-2026-50525 | 9.0.0 – < 9.0.18 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-50524 | 9.0.0 – < 9.0.18 | .NET Framework Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-47304 | 9.0.0 – < 9.0.18 | .NET Security Feature Bypass Vulnerability | CRITICAL 9.8 | 0.3 % | ||
| CVE-2026-47303 | 9.0.0 – < 9.0.18 | ASP.NET Core Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-47302 | 9.0.0 – < 9.0.18 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-47300 | 9.0.0 – < 9.0.18 | ASP.NET Core Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-57108 | 9.0.0 – < 9.0.18 | .NET Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-56170 | 9.0.0 – < 9.0.18 | ASP.NET Core Denial of Service Vulnerability | HIGH 7.5 | 1.2 % |