CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 09:23 UTC )
This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:net_framework_4.6.2_4.7_4.7.1_4.7.2 . Show all products
45 CVEs, showing 1 to 45
CVE Severity Title Published CVE-2026-97801 High 7.5 .NET Framework Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-102869 High 8.8 .NET and Visual Studio Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-58280 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-97788 High 7.5 Active Directory Federation Services (AD FS) Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96960 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96959 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96958 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96233 High 7.5 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85363 High 8.8 .NET Framework Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-84008 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-83520 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70035 High 8.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70007 High 8.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96224 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96222 High 7.4 Active Directory Federation Services (AD FS) Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70174 High 8.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69651 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-108398 High 8.8 .NET Framework Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69522 High 8.8 .NET and Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-70354 High 7.8 .NET Core Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-65810 High 7.8 .NET Framework Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62886 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62872 High 8.8 .NET Framework Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-50659 Medium 6.5 .NET Spoofing Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50650 High 7.8 .NET Framework Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50649 High 7.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50648 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50646 High 7.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50527 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50525 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47304 High 8.1 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47302 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50647 High 7.5 Active Directory Federation Server Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50411 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50355 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50324 Medium 5.9 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50368 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50304 High 7.5 Windows Active Directory Federation Services Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50653 High 7.5 Azure Active Directory Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50652 High 7.5 Azure Active Directory Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-23666 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-33116 High 7.5 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32226 Medium 5.9 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2024-29059 Known exploited
High 7.5 .NET Framework Information Disclosure Vulnerability Assigned by microsoft
Mar 22, 2024 CVE-2020-0646 Known exploited
Critical 9.8 A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'. Assigned by microsoft
Jan 14, 2020
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
