.NET Framework 4.x — End of Life
EOL soon High risk12 releases in this series30 CVEs
.NET Framework 4.x is partially supported: only 4.8.1, 4.8, 4.7.2, 4.7.1, 4.7, 4.6.2 still receive security fixes. 30 CVEs are tracked for this series. 27 of them were published after the end of life of the affected cycle and will not get an official patch.
.NET Framework 4.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 4.8.1 | Aug 9, 2022 | — | No | — | Active | |
| 4.8 | Apr 18, 2019 | — | No | — | Active | |
| 4.7.2 | Apr 30, 2018 | — | No | — | Active | |
| 4.7.1 | Oct 17, 2017 | — | No | — | Active | |
| 4.7 | Apr 5, 2017 | — | No | — | Active | |
| 4.6.2 | Aug 2, 2016 | — | Jan 12, 2027 | — | EOL soon | |
| 4.6.1 | Nov 30, 2015 | — | Apr 26, 2022 | — | EOL | |
| 4.6 | Jul 20, 2015 | — | Apr 26, 2022 | — | EOL | |
| 4.5.2 | May 5, 2014 | — | Apr 26, 2022 | — | EOL | |
| 4.5.1 | Oct 17, 2013 | — | Jan 12, 2016 | — | EOL | |
| 4.5 | Aug 15, 2012 | — | Jan 12, 2016 | — | EOL | |
| 4.0 | Apr 12, 2010 | — | Jan 12, 2016 | — | EOL |
CVEs affecting .NET Framework 4.x (234)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-70354 | HIGH | 7.8 | 0.36% | — | 4.8 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-70354 | HIGH | 7.8 | 0.36% | — | 4.8.1 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-70354 | HIGH | 7.8 | 0.36% | — | 4.7.1 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-70354 | HIGH | 7.8 | 0.36% | — | 4.6 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-70354 | HIGH | 7.8 | 0.36% | — | 4.7.2 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-70354 | HIGH | 7.8 | 0.36% | — | 4.6.1 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-70354 | HIGH | 7.8 | 0.36% | — | 4.7 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-70354 | HIGH | 7.8 | 0.36% | — | 4.6.2 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-65810 | HIGH | 7.8 | 0.40% | — | 4.7.2 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65810 | HIGH | 7.8 | 0.40% | — | 4.6 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65810 | HIGH | 7.8 | 0.40% | — | 4.8.1 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65810 | HIGH | 7.8 | 0.40% | — | 4.8 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65810 | HIGH | 7.8 | 0.40% | — | 4.6.2 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65810 | HIGH | 7.8 | 0.40% | — | 4.7 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65810 | HIGH | 7.8 | 0.40% | — | 4.6.1 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65810 | HIGH | 7.8 | 0.40% | — | 4.7.1 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-62897 | HIGH | 7.0 | 0.36% | — | 4.8.1 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-62897 | HIGH | 7.0 | 0.36% | — | 4.7 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-62897 | HIGH | 7.0 | 0.36% | — | 4.7.1 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-62897 | HIGH | 7.0 | 0.36% | — | 4.8 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-62897 | HIGH | 7.0 | 0.36% | — | 4.7.2 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-62872 | HIGH | 8.8 | 0.77% | — | 4.8 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-62872 | HIGH | 8.8 | 0.77% | — | 4.6.2 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-62872 | HIGH | 8.8 | 0.77% | — | 4.7.1 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-62872 | HIGH | 8.8 | 0.77% | — | 4.6.1 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-62872 | HIGH | 8.8 | 0.77% | — | 4.8.1 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-62872 | HIGH | 8.8 | 0.77% | — | 4.6 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-62872 | HIGH | 8.8 | 0.77% | — | 4.7.2 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-62872 | HIGH | 8.8 | 0.77% | — | 4.7 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-50659 | MEDIUM | 6.5 | 0.73% | — | 4.8 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | Jul 14, 2026 |
| CVE-2026-50659 | MEDIUM | 6.5 | 0.73% | — | 4.6.2 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | Jul 14, 2026 |
| CVE-2026-50659 | MEDIUM | 6.5 | 0.73% | — | 4.7.1 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | Jul 14, 2026 |
| CVE-2026-50659 | MEDIUM | 6.5 | 0.73% | — | 4.8.1 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | Jul 14, 2026 |
| CVE-2026-50659 | MEDIUM | 6.5 | 0.73% | — | 4.7.2 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | Jul 14, 2026 |
| CVE-2026-50659 | MEDIUM | 6.5 | 0.73% | — | 4.6 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | Jul 14, 2026 |
| CVE-2026-50659 | MEDIUM | 6.5 | 0.73% | — | 4.6.1 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | Jul 14, 2026 |
| CVE-2026-50659 | MEDIUM | 6.5 | 0.73% | — | 4.7 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | Jul 14, 2026 |
| CVE-2026-50650 | HIGH | 7.8 | 0.46% | — | 4.6 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p… | Jul 14, 2026 |
| CVE-2026-50650 | HIGH | 7.8 | 0.46% | — | 4.6.2 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p… | Jul 14, 2026 |
| CVE-2026-50650 | HIGH | 7.8 | 0.46% | — | 4.7.2 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p… | Jul 14, 2026 |
| CVE-2026-50650 | HIGH | 7.8 | 0.46% | — | 4.7.1 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p… | Jul 14, 2026 |
| CVE-2026-50650 | HIGH | 7.8 | 0.46% | — | 4.7 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p… | Jul 14, 2026 |
| CVE-2026-50650 | HIGH | 7.8 | 0.46% | — | 4.8.1 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p… | Jul 14, 2026 |
| CVE-2026-50650 | HIGH | 7.8 | 0.46% | — | 4.6.1 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p… | Jul 14, 2026 |
| CVE-2026-50650 | HIGH | 7.8 | 0.46% | — | 4.8 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p… | Jul 14, 2026 |
| CVE-2026-50649 | HIGH | 7.8 | 4.01% | — | 4.6.1 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50649 | HIGH | 7.8 | 4.01% | — | 4.8 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50649 | HIGH | 7.8 | 4.01% | — | 4.7.2 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50649 | HIGH | 7.8 | 4.01% | — | 4.8.1 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50649 | HIGH | 7.8 | 4.01% | — | 4.6 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50649 | HIGH | 7.8 | 4.01% | — | 4.7.1 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50649 | HIGH | 7.8 | 4.01% | — | 4.7 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50649 | HIGH | 7.8 | 4.01% | — | 4.6.2 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50648 | HIGH | 7.5 | 1.17% | — | 4.8 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o… | Jul 14, 2026 |
| CVE-2026-50648 | HIGH | 7.5 | 1.17% | — | 4.7.1 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o… | Jul 14, 2026 |
| CVE-2026-50648 | HIGH | 7.5 | 1.17% | — | 4.8.1 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o… | Jul 14, 2026 |
| CVE-2026-50648 | HIGH | 7.5 | 1.17% | — | 4.7 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o… | Jul 14, 2026 |
| CVE-2026-50648 | HIGH | 7.5 | 1.17% | — | 4.6.1 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o… | Jul 14, 2026 |
| CVE-2026-50648 | HIGH | 7.5 | 1.17% | — | 4.7.2 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o… | Jul 14, 2026 |
| CVE-2026-50648 | HIGH | 7.5 | 1.17% | — | 4.6.2 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o… | Jul 14, 2026 |
| CVE-2026-50648 | HIGH | 7.5 | 1.17% | — | 4.6 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o… | Jul 14, 2026 |
| CVE-2026-50646 | HIGH | 7.8 | 4.01% | — | 4.7.1 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50646 | HIGH | 7.8 | 4.01% | — | 4.7.2 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50646 | HIGH | 7.8 | 4.01% | — | 4.6.2 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50646 | HIGH | 7.8 | 4.01% | — | 4.6.1 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50646 | HIGH | 7.8 | 4.01% | — | 4.7 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50646 | HIGH | 7.8 | 4.01% | — | 4.8 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50646 | HIGH | 7.8 | 4.01% | — | 4.6 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50646 | HIGH | 7.8 | 4.01% | — | 4.8.1 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50527 | HIGH | 7.5 | 1.17% | — | 4.6 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50527 | HIGH | 7.5 | 1.17% | — | 4.7 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50527 | HIGH | 7.5 | 1.17% | — | 4.8.1 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50527 | HIGH | 7.5 | 1.17% | — | 4.7.1 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50527 | HIGH | 7.5 | 1.17% | — | 4.6.1 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50527 | HIGH | 7.5 | 1.17% | — | 4.6.2 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50527 | HIGH | 7.5 | 1.17% | — | 4.8 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50527 | HIGH | 7.5 | 1.17% | — | 4.7.2 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50525 | HIGH | 7.5 | 1.17% | — | 4.7 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-50525 | HIGH | 7.5 | 1.17% | — | 4.6 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-50525 | HIGH | 7.5 | 1.17% | — | 4.8.1 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-50525 | HIGH | 7.5 | 1.17% | — | 4.8 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-50525 | HIGH | 7.5 | 1.17% | — | 4.6.2 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-50525 | HIGH | 7.5 | 1.17% | — | 4.6.1 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-50525 | HIGH | 7.5 | 1.17% | — | 4.7.2 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-50525 | HIGH | 7.5 | 1.17% | — | 4.7.1 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-47304 | HIGH | 8.1 | 0.28% | — | 4.7.2 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov… | Jul 14, 2026 |
| CVE-2026-47304 | HIGH | 8.1 | 0.28% | — | 4.6.1 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov… | Jul 14, 2026 |
| CVE-2026-47304 | HIGH | 8.1 | 0.28% | — | 4.7 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov… | Jul 14, 2026 |
| CVE-2026-47304 | HIGH | 8.1 | 0.28% | — | 4.7.1 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov… | Jul 14, 2026 |
| CVE-2026-47304 | HIGH | 8.1 | 0.28% | — | 4.8 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov… | Jul 14, 2026 |
| CVE-2026-47304 | HIGH | 8.1 | 0.28% | — | 4.6 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov… | Jul 14, 2026 |
| CVE-2026-47304 | HIGH | 8.1 | 0.28% | — | 4.8.1 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov… | Jul 14, 2026 |
| CVE-2026-47304 | HIGH | 8.1 | 0.28% | — | 4.6.2 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov… | Jul 14, 2026 |
| CVE-2026-47302 | HIGH | 7.5 | 1.17% | — | 4.8.1 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-47302 | HIGH | 7.5 | 1.17% | — | 4.6.2 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-47302 | HIGH | 7.5 | 1.17% | — | 4.7.2 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-47302 | HIGH | 7.5 | 1.17% | — | 4.6 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-47302 | HIGH | 7.5 | 1.17% | — | 4.6.1 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-47302 | HIGH | 7.5 | 1.17% | — | 4.8 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-47302 | HIGH | 7.5 | 1.17% | — | 4.7.1 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-47302 | HIGH | 7.5 | 1.17% | — | 4.7 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw… | Jul 14, 2026 |
| CVE-2026-50647 | HIGH | 7.5 | 1.17% | — | 4.6.2 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unautho… | Jul 14, 2026 |
| CVE-2026-50647 | HIGH | 7.5 | 1.17% | — | 4.7.2 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unautho… | Jul 14, 2026 |
| CVE-2026-50647 | HIGH | 7.5 | 1.17% | — | 4.7 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unautho… | Jul 14, 2026 |
| CVE-2026-50647 | HIGH | 7.5 | 1.17% | — | 4.6.1 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unautho… | Jul 14, 2026 |
| CVE-2026-50647 | HIGH | 7.5 | 1.17% | — | 4.8 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unautho… | Jul 14, 2026 |
| CVE-2026-50647 | HIGH | 7.5 | 1.17% | — | 4.7.1 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unautho… | Jul 14, 2026 |
| CVE-2026-50647 | HIGH | 7.5 | 1.17% | — | 4.8.1 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unautho… | Jul 14, 2026 |
| CVE-2026-50647 | HIGH | 7.5 | 1.17% | — | 4.6 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unautho… | Jul 14, 2026 |
| CVE-2026-50411 | HIGH | 7.5 | 1.17% | — | 4.6.2 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny serv… | Jul 14, 2026 |
| CVE-2026-50411 | HIGH | 7.5 | 1.17% | — | 4.7 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny serv… | Jul 14, 2026 |
| CVE-2026-50411 | HIGH | 7.5 | 1.17% | — | 4.7.2 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny serv… | Jul 14, 2026 |
| CVE-2026-50411 | HIGH | 7.5 | 1.17% | — | 4.7.1 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny serv… | Jul 14, 2026 |
| CVE-2026-50411 | HIGH | 7.5 | 1.17% | — | 4.8.1 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny serv… | Jul 14, 2026 |
| CVE-2026-50411 | HIGH | 7.5 | 1.17% | — | 4.6 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny serv… | Jul 14, 2026 |
| CVE-2026-50411 | HIGH | 7.5 | 1.17% | — | 4.8 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny serv… | Jul 14, 2026 |
| CVE-2026-50411 | HIGH | 7.5 | 1.17% | — | 4.6.1 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny serv… | Jul 14, 2026 |
| CVE-2026-50368 | HIGH | 7.5 | 1.17% | — | 4.6.1 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50368 | HIGH | 7.5 | 1.17% | — | 4.8 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50368 | HIGH | 7.5 | 1.17% | — | 4.7.1 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50368 | HIGH | 7.5 | 1.17% | — | 4.7 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50368 | HIGH | 7.5 | 1.17% | — | 4.6 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50368 | HIGH | 7.5 | 1.17% | — | 4.7.2 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50368 | HIGH | 7.5 | 1.17% | — | 4.6.2 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50368 | HIGH | 7.5 | 1.17% | — | 4.8.1 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50355 | HIGH | 7.5 | 1.17% | — | 4.7.2 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50355 | HIGH | 7.5 | 1.17% | — | 4.6.1 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50355 | HIGH | 7.5 | 1.17% | — | 4.6.2 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50355 | HIGH | 7.5 | 1.17% | — | 4.8 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50355 | HIGH | 7.5 | 1.17% | — | 4.7.1 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50355 | HIGH | 7.5 | 1.17% | — | 4.7 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50355 | HIGH | 7.5 | 1.17% | — | 4.8.1 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50355 | HIGH | 7.5 | 1.17% | — | 4.6 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over… | Jul 14, 2026 |
| CVE-2026-50653 | HIGH | 7.5 | 1.17% | — | 4.8.1 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny… | Jul 14, 2026 |
| CVE-2026-50653 | HIGH | 7.5 | 1.17% | — | 4.8 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny… | Jul 14, 2026 |
| CVE-2026-50653 | HIGH | 7.5 | 1.17% | — | 4.6.2 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny… | Jul 14, 2026 |
| CVE-2026-50653 | HIGH | 7.5 | 1.17% | — | 4.7.1 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny… | Jul 14, 2026 |
| CVE-2026-50653 | HIGH | 7.5 | 1.17% | — | 4.6 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny… | Jul 14, 2026 |
| CVE-2026-50653 | HIGH | 7.5 | 1.17% | — | 4.7 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny… | Jul 14, 2026 |
| CVE-2026-50653 | HIGH | 7.5 | 1.17% | — | 4.7.2 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny… | Jul 14, 2026 |
| CVE-2026-50653 | HIGH | 7.5 | 1.17% | — | 4.6.1 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny… | Jul 14, 2026 |
| CVE-2026-50652 | HIGH | 7.5 | 1.73% | — | 4.7.1 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a netwo… | Jul 14, 2026 |
| CVE-2026-50652 | HIGH | 7.5 | 1.73% | — | 4.8 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a netwo… | Jul 14, 2026 |
| CVE-2026-50652 | HIGH | 7.5 | 1.73% | — | 4.6.2 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a netwo… | Jul 14, 2026 |
| CVE-2026-50652 | HIGH | 7.5 | 1.73% | — | 4.6.1 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a netwo… | Jul 14, 2026 |
| CVE-2026-50652 | HIGH | 7.5 | 1.73% | — | 4.8.1 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a netwo… | Jul 14, 2026 |
| CVE-2026-50652 | HIGH | 7.5 | 1.73% | — | 4.6 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a netwo… | Jul 14, 2026 |
| CVE-2026-50652 | HIGH | 7.5 | 1.73% | — | 4.7 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a netwo… | Jul 14, 2026 |
| CVE-2026-50652 | HIGH | 7.5 | 1.73% | — | 4.7.2 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a netwo… | Jul 14, 2026 |
| CVE-2026-35433 | HIGH | 7.3 | 0.57% | — | 4.8.1 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-35433 | HIGH | 7.3 | 0.57% | — | 4.7 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-35433 | HIGH | 7.3 | 0.57% | — | 4.7.1 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-35433 | HIGH | 7.3 | 0.57% | — | 4.7.2 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-35433 | HIGH | 7.3 | 0.57% | — | 4.8 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-32177 | HIGH | 7.3 | 0.57% | — | 4.6 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-32177 | HIGH | 7.3 | 0.57% | — | 4.7.2 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-32177 | HIGH | 7.3 | 0.57% | — | 4.7 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-32177 | HIGH | 7.3 | 0.57% | — | 4.8.1 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-32177 | HIGH | 7.3 | 0.57% | — | 4.7.1 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-32177 | HIGH | 7.3 | 0.57% | — | 4.6.1 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-32177 | HIGH | 7.3 | 0.57% | — | 4.6.2 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-32177 | HIGH | 7.3 | 0.57% | — | 4.8 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | May 12, 2026 |
| CVE-2026-33116 | HIGH | 7.5 | 2.44% | — | 4.6.2 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized att… | Apr 14, 2026 |
| CVE-2026-33116 | HIGH | 7.5 | 2.44% | — | 4.6.1 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized att… | Apr 14, 2026 |
| CVE-2026-33116 | HIGH | 7.5 | 2.44% | — | 4.8 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized att… | Apr 14, 2026 |
| CVE-2026-33116 | HIGH | 7.5 | 2.44% | — | 4.8.1 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized att… | Apr 14, 2026 |
| CVE-2026-33116 | HIGH | 7.5 | 2.44% | — | 4.7.2 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized att… | Apr 14, 2026 |
| CVE-2026-33116 | HIGH | 7.5 | 2.44% | — | 4.7.1 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized att… | Apr 14, 2026 |
| CVE-2026-33116 | HIGH | 7.5 | 2.44% | — | 4.7 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized att… | Apr 14, 2026 |
| CVE-2026-33116 | HIGH | 7.5 | 2.44% | — | 4.6 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized att… | Apr 14, 2026 |
| CVE-2026-32226 | MEDIUM | 5.9 | 0.65% | — | 4.8 | Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an … | Apr 14, 2026 |
| CVE-2026-32226 | MEDIUM | 5.9 | 0.65% | — | 4.7.2 | Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an … | Apr 14, 2026 |
| CVE-2026-32226 | MEDIUM | 5.9 | 0.65% | — | 4.7 | Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an … | Apr 14, 2026 |
| CVE-2026-32226 | MEDIUM | 5.9 | 0.65% | — | 4.8.1 | Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an … | Apr 14, 2026 |
| CVE-2026-32226 | MEDIUM | 5.9 | 0.65% | — | 4.7.1 | Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an … | Apr 14, 2026 |
| CVE-2026-23666 | HIGH | 7.5 | 1.33% | — | 4.7.2 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network. | Apr 14, 2026 |
| CVE-2026-23666 | HIGH | 7.5 | 1.33% | — | 4.6.2 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network. | Apr 14, 2026 |
| CVE-2026-23666 | HIGH | 7.5 | 1.33% | — | 4.7 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network. | Apr 14, 2026 |
| CVE-2026-23666 | HIGH | 7.5 | 1.33% | — | 4.8.1 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network. | Apr 14, 2026 |
| CVE-2026-23666 | HIGH | 7.5 | 1.33% | — | 4.6.1 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network. | Apr 14, 2026 |
| CVE-2026-23666 | HIGH | 7.5 | 1.33% | — | 4.6 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network. | Apr 14, 2026 |
| CVE-2026-23666 | HIGH | 7.5 | 1.33% | — | 4.7.1 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network. | Apr 14, 2026 |
| CVE-2026-23666 | HIGH | 7.5 | 1.33% | — | 4.8 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network. | Apr 14, 2026 |
| CVE-2023-36899 | HIGH | 8.8 | 76.71% | — | 4.8.1 | ASP.NET Elevation of Privilege Vulnerability | Aug 8, 2023 |
| CVE-2023-36899 | HIGH | 8.8 | 76.71% | — | 4.6 | ASP.NET Elevation of Privilege Vulnerability | Aug 8, 2023 |
| CVE-2023-36899 | HIGH | 8.8 | 76.71% | — | 4.8 | ASP.NET Elevation of Privilege Vulnerability | Aug 8, 2023 |
| CVE-2023-36899 | HIGH | 8.8 | 76.71% | — | 4.7.1 | ASP.NET Elevation of Privilege Vulnerability | Aug 8, 2023 |
| CVE-2023-36899 | HIGH | 8.8 | 76.71% | — | 4.6.2 | ASP.NET Elevation of Privilege Vulnerability | Aug 8, 2023 |
| CVE-2023-36899 | HIGH | 8.8 | 76.71% | — | 4.7.2 | ASP.NET Elevation of Privilege Vulnerability | Aug 8, 2023 |
| CVE-2023-36899 | HIGH | 8.8 | 76.71% | — | 4.6.1 | ASP.NET Elevation of Privilege Vulnerability | Aug 8, 2023 |
| CVE-2023-36899 | HIGH | 8.8 | 76.71% | — | 4.7 | ASP.NET Elevation of Privilege Vulnerability | Aug 8, 2023 |
| CVE-2023-36873 | HIGH | 7.4 | 1.50% | — | 4.6.2 | .NET Framework Spoofing Vulnerability | Aug 8, 2023 |
| CVE-2023-36873 | HIGH | 7.4 | 1.50% | — | 4.8 | .NET Framework Spoofing Vulnerability | Aug 8, 2023 |
| CVE-2023-36873 | HIGH | 7.4 | 1.50% | — | 4.6.1 | .NET Framework Spoofing Vulnerability | Aug 8, 2023 |
| CVE-2023-36873 | HIGH | 7.4 | 1.50% | — | 4.7.1 | .NET Framework Spoofing Vulnerability | Aug 8, 2023 |
| CVE-2023-36873 | HIGH | 7.4 | 1.50% | — | 4.7.2 | .NET Framework Spoofing Vulnerability | Aug 8, 2023 |
| CVE-2023-36873 | HIGH | 7.4 | 1.50% | — | 4.6 | .NET Framework Spoofing Vulnerability | Aug 8, 2023 |
| CVE-2023-36873 | HIGH | 7.4 | 1.50% | — | 4.7 | .NET Framework Spoofing Vulnerability | Aug 8, 2023 |
| CVE-2023-36873 | HIGH | 7.4 | 1.50% | — | 4.8.1 | .NET Framework Spoofing Vulnerability | Aug 8, 2023 |
| CVE-2023-21808 | HIGH | 7.8 | 1.14% | — | 4.7 | .NET and Visual Studio Remote Code Execution Vulnerability | Feb 14, 2023 |
| CVE-2023-21808 | HIGH | 7.8 | 1.14% | — | 4.8 | .NET and Visual Studio Remote Code Execution Vulnerability | Feb 14, 2023 |
| CVE-2023-21808 | HIGH | 7.8 | 1.14% | — | 4.8.1 | .NET and Visual Studio Remote Code Execution Vulnerability | Feb 14, 2023 |
| CVE-2023-21808 | HIGH | 7.8 | 1.14% | — | 4.7.1 | .NET and Visual Studio Remote Code Execution Vulnerability | Feb 14, 2023 |
| CVE-2023-21808 | HIGH | 7.8 | 1.14% | — | 4.6.2 | .NET and Visual Studio Remote Code Execution Vulnerability | Feb 14, 2023 |
| CVE-2023-21808 | HIGH | 7.8 | 1.14% | — | 4.6.1 | .NET and Visual Studio Remote Code Execution Vulnerability | Feb 14, 2023 |
| CVE-2023-21808 | HIGH | 7.8 | 1.14% | — | 4.7.2 | .NET and Visual Studio Remote Code Execution Vulnerability | Feb 14, 2023 |
| CVE-2023-21808 | HIGH | 7.8 | 1.14% | — | 4.6 | .NET and Visual Studio Remote Code Execution Vulnerability | Feb 14, 2023 |
| CVE-2023-21722 | MEDIUM | 5.0 | 0.91% | — | 4.8.1 | .NET Framework Denial of Service Vulnerability | Feb 14, 2023 |
| CVE-2023-21722 | MEDIUM | 5.0 | 0.91% | — | 4.6.1 | .NET Framework Denial of Service Vulnerability | Feb 14, 2023 |
| CVE-2023-21722 | MEDIUM | 5.0 | 0.91% | — | 4.7 | .NET Framework Denial of Service Vulnerability | Feb 14, 2023 |
| CVE-2023-21722 | MEDIUM | 5.0 | 0.91% | — | 4.8 | .NET Framework Denial of Service Vulnerability | Feb 14, 2023 |
| CVE-2023-21722 | MEDIUM | 5.0 | 0.91% | — | 4.7.2 | .NET Framework Denial of Service Vulnerability | Feb 14, 2023 |
| CVE-2023-21722 | MEDIUM | 5.0 | 0.91% | — | 4.6 | .NET Framework Denial of Service Vulnerability | Feb 14, 2023 |
| CVE-2023-21722 | MEDIUM | 5.0 | 0.91% | — | 4.7.1 | .NET Framework Denial of Service Vulnerability | Feb 14, 2023 |
| CVE-2023-21722 | MEDIUM | 5.0 | 0.91% | — | 4.6.2 | .NET Framework Denial of Service Vulnerability | Feb 14, 2023 |
| CVE-2022-41064 | MEDIUM | 5.8 | 0.84% | — | 4.8.1 | .NET Framework Information Disclosure Vulnerability | Nov 9, 2022 |
| CVE-2022-41064 | MEDIUM | 5.8 | 0.84% | — | 4.6 | .NET Framework Information Disclosure Vulnerability | Nov 9, 2022 |
| CVE-2022-41064 | MEDIUM | 5.8 | 0.84% | — | 4.6.1 | .NET Framework Information Disclosure Vulnerability | Nov 9, 2022 |
| CVE-2022-41064 | MEDIUM | 5.8 | 0.84% | — | 4.6.2 | .NET Framework Information Disclosure Vulnerability | Nov 9, 2022 |
| CVE-2022-41064 | MEDIUM | 5.8 | 0.84% | — | 4.7.1 | .NET Framework Information Disclosure Vulnerability | Nov 9, 2022 |
| CVE-2022-41064 | MEDIUM | 5.8 | 0.84% | — | 4.7.2 | .NET Framework Information Disclosure Vulnerability | Nov 9, 2022 |
| CVE-2022-41064 | MEDIUM | 5.8 | 0.84% | — | 4.7 | .NET Framework Information Disclosure Vulnerability | Nov 9, 2022 |
| CVE-2022-41064 | MEDIUM | 5.8 | 0.84% | — | 4.8 | .NET Framework Information Disclosure Vulnerability | Nov 9, 2022 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.7.2 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.6.1 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.7.1 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.7 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.8.1 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.5 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.5.2 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.8 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.6.2 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.6 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
| CVE-2020-1108 | HIGH | 7.5 | 6.46% | — | 4.5.1 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w… | May 21, 2020 |
Add a .NET Framework 4 EOL badge to your README
Show your users which .NET Framework version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/dotnetfx/4)Frequently asked questions
Is .NET Framework 4 end of life?
Partially. 6 of the 12 .NET Framework 4.x releases have reached end of life. Still supported: 4.8.1, 4.8, 4.7.2, 4.7.1, 4.7, 4.6.2.
What CVEs affect .NET Framework 4?
There are 30 CVEs tracked for .NET Framework 4.x. See the full list above with CVSS and EPSS scores.
What is the latest .NET Framework 4 version?
Check the version table above for the latest .NET Framework 4.x patch release.
When was .NET Framework 4 first released?
.NET Framework 4.0 was released on April 12, 2010. See the full version timeline in the table above.
Is it safe to run .NET Framework 4 in production?
Only on a supported release (4.8.1, 4.8, 4.7.2, 4.7.1, 4.7, 4.6.2). Make sure you run the latest patch to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA