40 exploited vulnerabilities in .Net Framework

Vulnerabilities with publicly known exploits

Vendors: Microsoft, Alt Linux, Centos, Red Hat, Apache, Python
With known exploits: 40
Affected Microsoft .net Core versions: = 2.1, 3.1, 2.1.18, 3.1.4
Affected Microsoft .net Framework versions: = 3.0, 2.0, 1.1, 3.5, 3.5.1, 4.0, 4.5, 4.5.1, 2.0.50727, 4.5.2, 4.6, 1.0, 4.8, 4.7.2, 4.6.1, 4.6.2, 4.7
Affected Microsoft Live Meeting versions: = 2007
Affected Microsoft Lync versions: = 2010, 2013
Affected Microsoft Office versions: = 2007, 2010
Affected Microsoft Skype For Business versions: = 2016
Affected Microsoft Word Viewer versions: All versions
Affected Microsoft Windows 10 versions: All versions

CVE-2020-1147 9 exploits

CVSS 10.0 HIGH 2020-07-14FIX AVAILABLE

Microsoft SharePoint Server 2019 - Remote Code Execution Exploit (2)Microsoft SharePoint Server 2019 - Remote Code Execution (2)

CVE-2020-0646 5 exploits

CVSS 10.0 CRITICAL 2020-01-14

BigBountyRecon - This Tool Utilises 58 Different Techniques To Expediate The Process Of Intial Reconnaissance On The Target Organisation SharePoint Workflows - XOML Injection (Metasploit)

CVSS 10.0 CRITICAL 2018-09-11

CVE-2014-1806 4 exploits

CVSS 10.0 HIGH 1999-01-01

.NET Remoting Services Remote Command Execution Vulnerability .NET Remoting Services - Remote Command Execution

CVSS 10.0 HIGH 2008-11-17FIX AVAILABLE

CVSS 9.3 HIGH 2018-07-10

CVE-2017-8759 13 exploits

CVSS 9.3 HIGH 2017-09-12

Exploit for Code Injection in Microsoft Exploit for Code Injection in Microsoft

CVE-2016-0145 2 exploits

CVSS 9.3 HIGH 2016-04-12FIX AVAILABLE

Microsoft Windows - Kernel win32k.sys TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)Microsoft Windows Kernel - 'win32k.sys' TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)

CVE-2015-2464 2 exploits

CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE

Windows win32k.sys TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write Exploit Microsoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write

CVE-2015-2463 2 exploits

CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE

Windows win32k.sys TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access Microsoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access

CVE-2015-2462 2 exploits

CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE

Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table Exploit Microsoft Windows - 'ATMFD.DLL' Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table

CVE-2015-2460 3 exploits

CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE

Windows ATMFD.DLL CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access Windows ATMFD.DLL CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access Exploit

CVE-2015-2456 2 exploits

CVSS 9.3 HIGH 2015-08-15FIX AVAILABLE

Windows win32k.sys TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow Exploi Microsoft Windows - 'win32k.sys' TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow

CVE-2015-2455 2 exploits

CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE

Windows win32k.sys TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow Exploit Microsoft Windows - 'win32k.sys' TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow

CVE-2014-4149 3 exploits

CVSS 9.3 HIGH 1999-01-01FIX AVAILABLE

.NET Remoting Services Remote Command Execution Vulnerability .NET Remoting Services - Remote Command Execution

CVE-2014-0257 6 exploits

CVSS 9.3 HIGH 2014-02-11

MS14-009 .NET Deployment Service IE Sandbox Escape MS14-009 .NET Deployment Service IE Sandbox Escape Exploit

CVE-2012-0163 2 exploits

CVSS 9.3 HIGH 2012-04-10

Microsoft .NET Framework EncoderParameter - Integer Overflow (MS12-025)Microsoft .NET Framework CRL参数解析漏洞 (MS12-025)

CVE-2023-36899 1 exploit

CVSS 8.8 HIGH 2023-08-08

Exploit for Improper Input Validation in Microsoft

CVSS 8.8 HIGH 2021-02-25FIX AVAILABLE

CVE-2024-29059 1 exploit

CVSS 7.8 HIGH 2024-03-22FIX AVAILABLE

Exploit for Generation of Error Message Containing Sensitive Information in Microsoft

CVSS 7.8 HIGH 2024-02-13

CVSS 7.8 HIGH 2024-02-13

CVSS 7.8 HIGH 2020-05-12

CVSS 7.8 HIGH 2020-05-12FIX AVAILABLE

CVSS 7.8 HIGH 2019-07-09

CVE-2018-5282 4 exploits

CVSS 7.8 HIGH 2018-01-08

Kentico CMS 11.0 - Buffer Overflow Vulnerability Kentico CMS 11.0 - Buffer Overflow

CVE-2017-0160 3 exploits

CVSS 7.8 HIGH 2017-04-11

Microsoft Windows - ManagementObject Arbitrary .NET Serialization Remote Code Execution Exploit Microsoft Windows - ManagementObject Arbitrary .NET Serialization Remote Code Execution

CVE-2007-0042 1 exploit

CVSS 7.8 HIGH 2007-07-10FIX AVAILABLE

Microsoft .Net Framework 2.0 - Multiple Null Byte Injection Vulnerabilities

CVE-2011-1271 2 exploits

CVSS 7.7 HIGH 2011-05-10

Microsoft .NET Framework JIT编译器优化NULL字符串远程代码执行漏洞(MS11-044)Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution

CVE-2004-0847 1 exploit

CVSS 7.5 HIGH 2004-10-06

Microsoft ASP.NET 1.x - URI Canonicalization Unauthorized Web Access

CVSS 7.3 HIGH 2025-10-14

CVSS 7.3 HIGH 2023-06-13

CVSS 6.5 MEDIUM 2019-05-14FIX AVAILABLE

CVE-2010-3332 4 exploits

CVSS 6.4 MEDIUM 2010-09-22FIX AVAILABLE

Microsoft ASP.NET - Auto-Decryptor File Download (MS10-070)Microsoft ASP.NET - Padding Oracle File Download (MS10-070)

CVSS 5.9 MEDIUM 2024-05-14

CVE-2016-3209 1 exploit

CVSS 5.5 MEDIUM 2016-10-11FIX AVAILABLE

Microsoft Windows - 'win32k.sys' TTF Processing RCVT TrueType Instruction Handler Out-of-Bounds Read (MS16-120)

CVSS 5.1 MEDIUM 2006-03-30FIX AVAILABLE

CVE-2014-0295 1 exploit

CVSS 4.3 MEDIUM 2014-02-11

Microsoft .NET Framework ASLR安全限制绕过漏洞(CVE-2014-0295)(MS14-009)

CVE-2010-2088 1 exploit

CVSS 4.3 MEDIUM 2010-05-27FIX AVAILABLE

Microsoft .NET Framework 3.5 ViewState远程跨站脚本漏洞

CVE-2006-1510 1 exploit

CVSS 4.0 MEDIUM 2006-03-30FIX AVAILABLE

Microsoft .NET Framework SDK 1.0/1.1 - MSIL Tools Buffer Overflow