CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 05:00 UTC )
This week: 5,436 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 358 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:.net . Show all products
61 CVEs, showing 1 to 50 Page 1 of 2 Next CVE Severity Title Published CVE-2026-96960 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96959 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96958 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96957 High 8.8 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69806 High 7.0 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71328 High 8.8 .NET and Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69304 Medium 5.9 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-58649 Medium 6.5 .NET Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69439 High 8.8 .NET and Visual Studio Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-62898 High 7.5 Microsoft QUIC Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70354 High 7.8 .NET Core Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62886 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62871 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-58641 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62909 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62902 Medium 6.5 .NET Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62901 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62900 Medium 5.9 .NET Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62899 Medium 5.9 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62897 High 7.0 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-50659 Medium 6.5 .NET Spoofing Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50651 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50650 High 7.8 .NET Framework Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50649 High 7.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50648 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50646 High 7.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50528 High 8.2 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50527 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50526 High 7.0 .NET Tampering Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50525 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50524 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47304 High 8.1 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47303 High 8.8 ASP.NET Core Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47302 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47300 High 8.8 ASP.NET Core Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-57108 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-56170 High 7.5 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-45591 High 7.5 Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. Jun 9, 2026 CVE-2026-45491 Medium 5.5 Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally. Jun 9, 2026 CVE-2026-45490 High 7.8 Improper authorization in .NET allows an authorized attacker to elevate privileges locally. Jun 9, 2026 CVE-2026-42899 High 7.5 Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network. May 12, 2026 CVE-2026-35433 High 7.3 Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. May 12, 2026 CVE-2026-32177 High 7.3 Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. May 12, 2026 CVE-2026-32175 Medium 4.3 A tampering vulnerability exists when .NET Core improperly handles specially crafted files. May 12, 2026 CVE-2026-32203 High 7.5 .NET and Visual Studio Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-26171 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33116 High 7.5 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32178 High 7.5 .NET Spoofing Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-25667 High 7.5 ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet, because of an incorre… Mar 19, 2026 CVE-2026-26131 High 7.8 Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally. Mar 10, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
