.NET
.NET runtime and libraries. Newest first.
0 .NET incidents in the last 12 months
- Incidents
- 4
- Live
- 0
- Patched
- 4
- Days without an incident
- 625
- Longest quiet run: 625 days (Feb 5–Oct 22)
Show 4 older incidents4 older incidents
February 2025 1
HighMicrosoft .NET Framework: .NET Framework Information Disclosure VulnerabilityPatched
Microsoft .NET Framework Patched
Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution. Added to CISA KEV on 2025-02-04.
Open incident →CVE-2024-29059
May 2024 1
CriticalProgress Telerik Report Server Authentication Bypass by SpoofingPatched
Progress Telerik Report Server Patched
Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access. Added to the CISA KEV catalog on 2024-06-13.
Open incident →CVE-2024-4358
August 2023 2
- HighPatched
HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487)
Attackers abused HTTP/2 stream cancellation (open a request, reset it right away, repeat) to make servers do work at enormous rates. Peaks hit 398M req/s at Google, 201M at Cloudflare and 155M at AWS. Almost every HTTP/2 server and proxy needed a fix, including Node.js, Go, Java servers, .NET/IIS and nginx.
HTTP/2 protocol implementations (servers, proxies, CDNs)Closed Oct 10, 2023
HighMicrosoft .NET Core and Visual Studio: Denial-of-Service (CVE-2023-38180)Patched
Microsoft .NET Core and Visual Studio Patched
Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS). Added to CISA KEV on 2023-08-09.
Open incident →CVE-2023-38180
