Product of Microsoft

.NET Framework

As of , 3 Microsoft .NET Framework vulnerabilities are on CISA's list of exploited vulnerabilities; 0 were added in 2026. Patch first: CVE-2020-0646.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2020-0646Remote Code ExecutionMicrosoft .NET FrameworkPatch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry0.99
2CVE-2024-29059Information DisclosureMicrosoft .NET FrameworkPatch this weekEPSS 0.990.99
3CVE-2017-8759Remote Code ExecutionMicrosoft .NET FrameworkPatch this weekEPSS 0.890.89

Added each year

0.511.522021: 2220212022: nonenone20222023: nonenone20232024: nonenone20242025: 1120252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20212
2022none
2023none
2024none
20251
2026none

Used in ransomware