Dotnet8
Vulnerabilities
37
Known exploited
1
Max CVSS
9.9
Top EPSS
0.99999
Severity breakdown
Critical
3
High
27
Medium
7
Low
0
Also matched as (raw): dotnet8
Top vulnerabilities
CVE-2025-55315Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
CVE-2024-0057NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2023-36049.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2025-21176.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2024-43498.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-38229.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-35264.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2025-26646External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
CVE-2025-30399Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2025-26682Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2025-21172.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2025-21171.NET Remote Code Execution Vulnerability
CVE-2024-43499.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-43485.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-43484.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-43483.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-30105.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-26190Microsoft QUIC Denial of Service Vulnerability
CVE-2024-21404.NET Denial of Service Vulnerability
CVE-2024-21392.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-21386.NET Denial of Service Vulnerability
CVE-2024-0056Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2023-44487The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-36038ASP.NET Core Denial of Service Vulnerability
CVE-2025-55247Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.