Microsoft .NET Core
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1147 | | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the | HIGH 7.8 | 96 % | KEV | |
| CVE-2020-0606 | 3.0 ; 3.1 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 17 % | ||
| CVE-2020-0605 | 3.0 ; 3.1 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 17 % | ||
| CVE-2019-1301 | 2.1 ; 2.2 | A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'. | HIGH 7.5 | 5.3 % | ||
| CVE-2019-0981 | 1 ; 1.1 ; 2.1 ; … | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core | HIGH 7.5 | 4.9 % | ||
| CVE-2019-0980 | 1 ; 1.1 ; 2.1 ; … | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core | HIGH 7.5 | 4.9 % | ||
| CVE-2019-0820 | 1 ; 1.1 ; 2.1 ; … | A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Co | HIGH 7.5 | 5.7 % | ||
| CVE-2019-0657 | 1 ; 2.1 ; 2.2 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio | MEDIUM 5.9 | 4.5 % | ||
| CVE-2019-0545 | 2.1 ; 2.2 | An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) c | HIGH 7.5 | 9.6 % | ||
| CVE-2018-8416 | 2.1 | A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This af | MEDIUM 6.5 | 7.3 % | ||
| CVE-2018-8292 | 1.0 ; 1.1 ; 2.1 | An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NE | HIGH 7.5 | 15 % | ||
| CVE-2018-8409 | 2.1 | A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." | HIGH 7.5 | 6.6 % | ||
| CVE-2018-8356 | 1.0 ; 1.1 ; 2.0 | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Fr | MEDIUM 5.5 | 0.7 % |