Class familyMicrosoft · .NET Framework
Microsoft .NET input validation flaws, 2017–2026
5 .NET Framework CVEs with CWE-20 weaknesses, 13 Sep 2017 to 14 Apr 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2017’17
2018’18
2019’19
2020’20
2021’21
2022’22
1 2023’23
2 2024’24
2025’25
1 2026’26
In CISA KEVNot in KEV
20171 CVE, 1 in KEV
20231 CVE
20242 CVEs
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2017-8759KEV | 13 Sep 2017 | Microsoft .NET Framework Remote Code Execution Vulnerability | Grouped by weakness | 77.4 |
| CVE-2023-36873 | 8 Aug 2023 | .NET Framework Spoofing Vulnerability | Grouped by weakness | 20.0 |
| CVE-2024-0057 | 9 Jan 2024 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability · fixed in 6.8.1 | Grouped by weakness | 23.6 |
| CVE-2024-21312 | 9 Jan 2024 | .NET Framework Denial of Service Vulnerability | Grouped by weakness | 23.1 |
| CVE-2026-33116 | 14 Apr 2026 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | Grouped by weakness | 21.7 |