CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:40 UTC )
What this means for you
This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:net_framework_3.5_and_4.7.2 . Show all products
45 CVEs, showing 1 to 45
CVE Severity Title Published CVE-2024-29059 Known exploited
High 7.5 .NET Framework Information Disclosure Vulnerability Assigned by microsoft
Mar 22, 2024 CVE-2026-32226 Medium 5.9 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33116 High 7.5 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-23666 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-50652 High 7.5 Azure Active Directory Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50653 High 7.5 Azure Active Directory Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50304 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50368 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50324 Medium 5.9 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50355 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50411 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50647 High 7.5 Active Directory Federation Server Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47302 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47304 High 8.1 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50525 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50527 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50646 High 7.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50648 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50649 High 7.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50650 High 7.8 .NET Framework Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50659 Medium 6.5 .NET Spoofing Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-62897 High 7.0 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62872 High 8.8 .NET Framework Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62886 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-65810 High 7.8 .NET Framework Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70354 High 7.8 .NET Core Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-69522 High 8.8 .NET and Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-108398 High 8.8 .NET Framework Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69651 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70174 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96222 High 7.4 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96224 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70007 High 8.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70035 High 8.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83520 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84008 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85363 High 8.8 .NET Framework Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96233 High 7.5 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96958 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96959 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96960 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97788 High 7.5 Active Directory Federation Services (AD FS) Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-58280 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102869 High 8.8 .NET and Visual Studio Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97801 High 7.5 .NET Framework Tampering Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.