Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:.net_framework:4.5.1:*:*:*:*:*:*:*

part: a version: 4.5.1 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
Product.Net Framework (6989685b-1c13-5505-b0b5-cec5bc25351e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-6108 vulnerable 2026-06-08 05:06:51.306376 Details available
The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT Gold and 8.1; Office 2007 SP3; Office 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6; Skype for Business 2016; Lync 2010; Lync 2013 SP1; Live Meeting 2007 Console; and Silverlight 5 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."
Published: 2015-12-09T11:00:00.000Z
Updated: 2024-08-06T07:15:12.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6099 vulnerable 2026-06-08 05:06:51.281532 Details available
Cross-site scripting (XSS) vulnerability in ASP.NET in Microsoft .NET Framework 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka ".NET Elevation of Privilege Vulnerability."
Published: 2015-11-11T11:00:00.000Z
Updated: 2024-08-06T07:15:13.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6096 vulnerable 2026-06-08 05:06:51.278140 Details available
The XML DTD parser in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka ".NET Information Disclosure Vulnerability."
Published: 2015-11-11T11:00:00.000Z
Updated: 2024-08-06T07:15:11.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2526 vulnerable 2026-06-08 05:06:35.189149 Details available
Microsoft .NET Framework 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to cause a denial of service to an ASP.NET web site via crafted requests, aka "MVC Denial of Service Vulnerability."
Published: 2015-09-09T00:00:00.000Z
Updated: 2024-08-06T05:17:27.337Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2504 vulnerable 2026-06-08 05:06:35.153482 Details available
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 improperly counts objects before performing an array copy, which allows remote attackers to (1) execute arbitrary code via a crafted XAML browser application (XBAP) or (2) bypass Code Access Security restrictions via a crafted .NET Framework application, aka ".NET Elevation of Privilege Vulnerability."
Published: 2015-09-09T00:00:00.000Z
Updated: 2024-08-06T05:17:27.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2464 vulnerable 2026-06-08 05:06:35.061072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2463 vulnerable 2026-06-08 05:06:35.059578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2462 vulnerable 2026-06-08 05:06:35.058601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2460 vulnerable 2026-06-08 05:06:35.057448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2456 vulnerable 2026-06-08 05:06:35.054886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2455 vulnerable 2026-06-08 05:06:35.053686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2435 vulnerable 2026-06-08 05:06:35.035196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1673 vulnerable 2026-06-08 05:06:26.045829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1672 vulnerable 2026-06-08 05:06:26.045372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1671 vulnerable 2026-06-08 05:06:26.038315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1670 vulnerable 2026-06-08 05:06:26.034773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1648 vulnerable 2026-06-08 05:06:26.018198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4149 vulnerable 2026-06-08 05:05:44.289113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4121 vulnerable 2026-06-08 05:05:44.268385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4073 vulnerable 2026-06-08 05:05:44.206224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4072 vulnerable 2026-06-08 05:05:44.205112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1806 vulnerable 2026-06-08 05:05:26.352741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0257 vulnerable 2026-06-08 05:05:12.497101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0253 vulnerable 2026-06-08 05:05:12.484224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.