Microsoft .NET 9
Microsoft .NET 9 gets security updates until 10/11/2026.
Latest version: 9.0.21, released on 13/10/2026
End of support: 10/11/2026
1 known vulnerability open in 9.0.21
Vulnerabilities in Microsoft .NET 9
60 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.
- CVE-2026-111497, CVSS 4.0: 9.2, actively exploited: still open in 9.0.21
- CVE-2026-47304, CVSS 3.1: 9.8: fixed in 9.0.18
- CVE-2024-43498, CVSS 3.1: 9.8: not affected in 9.0.21
- CVE-2026-71328, CVSS 3.1: 8.8: fixed in 9.0.20
- CVE-2026-69439, CVSS 3.1: 8.8: fixed in 9.0.20
- CVE-2026-47303, CVSS 3.1: 8.8: fixed in 9.0.18
- CVE-2026-47300, CVSS 3.1: 8.8: fixed in 9.0.18
- CVE-2025-21176, CVSS 3.1: 8.8: not affected in 9.0.21
- CVE-2026-50528, CVSS 3.1: 8.2: fixed in 9.0.18
- CVE-2025-26646, CVSS 3.1: 8.0: fixed in 9.0.5
- CVE-2026-70354, CVSS 3.1: 7.8: fixed in 9.0.19
- CVE-2026-62909, CVSS 3.1: 7.8: fixed in 9.0.19
- CVE-2026-62886, CVSS 3.1: 7.8: fixed in 9.0.19
- CVE-2026-62871, CVSS 3.1: 7.8: fixed in 9.0.19
- CVE-2026-58641, CVSS 3.1: 7.8: fixed in 9.0.19
- CVE-2026-50650, CVSS 3.1: 7.8: fixed in 9.0.18
- CVE-2026-50649, CVSS 3.1: 7.8: fixed in 9.0.18
- CVE-2026-50646, CVSS 3.1: 7.8: fixed in 9.0.18
- CVE-2026-45490, CVSS 3.1: 7.8: fixed in 9.0.17
- CVE-2026-96960, CVSS 3.1: 7.5: fixed in 9.0.21
- CVE-2026-96959, CVSS 3.1: 7.5: fixed in 9.0.21
- CVE-2026-96958, CVSS 3.1: 7.5: fixed in 9.0.21
- CVE-2026-62901, CVSS 3.1: 7.5: fixed in 9.0.19
- CVE-2026-62898, CVSS 3.1: 7.5: fixed in 9.0.19
- CVE-2026-57108, CVSS 3.1: 7.5: fixed in 9.0.18
- CVE-2026-56170, CVSS 3.1: 7.5: fixed in 9.0.18
- CVE-2026-50651, CVSS 3.1: 7.5: fixed in 9.0.18
- CVE-2026-50648, CVSS 3.1: 7.5: fixed in 9.0.18
- CVE-2026-50527, CVSS 3.1: 7.5: fixed in 9.0.18
- CVE-2026-50525, CVSS 3.1: 7.5: fixed in 9.0.18
- CVE-2026-50524, CVSS 3.1: 7.5: fixed in 9.0.18
- CVE-2026-47302, CVSS 3.1: 7.5: fixed in 9.0.18
- CVE-2026-45591, CVSS 3.1: 7.5: fixed in 9.0.17
- CVE-2026-42899, CVSS 3.1: 7.5: fixed in 9.0.16
- CVE-2026-33116, CVSS 3.1: 7.5: fixed in 9.0.15
- CVE-2026-32203, CVSS 3.1: 7.5: fixed in 9.0.15
- CVE-2026-32178, CVSS 3.1: 7.5: fixed in 9.0.15
- CVE-2026-26171, CVSS 3.1: 7.5: fixed in 9.0.15
- CVE-2026-26127, CVSS 3.1: 7.5: fixed in 9.0.14
- CVE-2026-25667, CVSS 3.1: 7.5: fixed in 9.0.11
- CVE-2026-21218, CVSS 3.1: 7.5: fixed in 9.0.13
- CVE-2025-30399, CVSS 3.1: 7.5: fixed in 9.0.6
- CVE-2025-21172, CVSS 3.1: 7.5: not affected in 9.0.21
- CVE-2025-21171, CVSS 3.1: 7.5: not affected in 9.0.21
- CVE-2024-43499, CVSS 3.1: 7.5: not affected in 9.0.21
- CVE-2026-35433, CVSS 3.1: 7.3: fixed in 9.0.16
- CVE-2026-32177, CVSS 3.1: 7.3: fixed in 9.0.16
- CVE-2025-55247, CVSS 3.1: 7.3: fixed in 9.0.10
- CVE-2025-21173, CVSS 3.1: 7.3: not affected in 9.0.21
- CVE-2026-69806, CVSS 3.1: 7.0: fixed in 9.0.20
- CVE-2026-62897, CVSS 3.1: 7.0: fixed in 9.0.19
- CVE-2026-62902, CVSS 3.1: 6.5: fixed in 9.0.19
- CVE-2026-50659, CVSS 3.1: 6.5: fixed in 9.0.18
- CVE-2026-69304, CVSS 3.1: 5.9: fixed in 9.0.20
- CVE-2026-62900, CVSS 3.1: 5.9: fixed in 9.0.19
- CVE-2026-62899, CVSS 3.1: 5.9: fixed in 9.0.19
- CVE-2025-55248, CVSS 3.1: 5.7: fixed in 9.0.10
- CVE-2026-50526, CVSS 3.1: 5.5: fixed in 9.0.18
- CVE-2026-45491, CVSS 3.1: 5.5: fixed in 9.0.17
- CVE-2026-32175, CVSS 3.1: 4.3: fixed in 9.0.16
2 vulnerabilities of Microsoft .NET have no version information in the NVD and are not assigned to any branch.
Get notified
Add Microsoft .NET with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Microsoft .NET 9