Microsoft

.Net Framework

188 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2012-0015

  • EPSS 23.78%
  • Veröffentlicht 14.02.2012 22:55:01
  • Zuletzt bearbeitet 16.06.2026 23:36:29

Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET applicati...

9.3

CVE-2011-1253

  • EPSS 13.24%
  • Veröffentlicht 12.10.2011 02:52:43
  • Zuletzt bearbeitet 16.06.2026 23:29:01

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritance, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP...

4.3

CVE-2011-1978

  • EPSS 20.21%
  • Veröffentlicht 10.08.2011 21:55:02
  • Zuletzt bearbeitet 16.06.2026 23:30:32

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser a...

4.3

CVE-2011-1977

  • EPSS 21.37%
  • Veröffentlicht 10.08.2011 21:55:01
  • Zuletzt bearbeitet 16.06.2026 23:30:32

The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HT...

9.3

CVE-2011-0664

  • EPSS 16.01%
  • Veröffentlicht 16.06.2011 20:55:01
  • Zuletzt bearbeitet 16.06.2026 23:27:50

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code vi...

5.1

CVE-2011-1271

Exploit
  • EPSS 20.1%
  • Veröffentlicht 10.05.2011 19:55:02
  • Zuletzt bearbeitet 16.06.2026 23:29:03

The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access rest...

9.3

CVE-2010-3958

  • EPSS 23.59%
  • Veröffentlicht 13.04.2011 18:55:00
  • Zuletzt bearbeitet 16.06.2026 23:23:53

The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted A...

9.3

CVE-2010-3228

  • EPSS 19.75%
  • Veröffentlicht 13.10.2010 19:00:45
  • Zuletzt bearbeitet 16.06.2026 23:22:24

The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework ...

6.4

CVE-2010-3332

Exploit
  • EPSS 67.48%
  • Veröffentlicht 22.09.2010 19:00:06
  • Zuletzt bearbeitet 16.06.2026 23:22:36

Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt ...

9.3

CVE-2010-1898

  • EPSS 25.03%
  • Veröffentlicht 11.08.2010 18:47:50
  • Zuletzt bearbeitet 16.06.2026 23:19:33

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and deleg...