Patch tracker / Products / Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016

Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016: vulnerabilities and security updates

Every CVE affecting Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
448
Updates (KBs)
3
Actively exploited (KEV)
5
Critical Severity
12

CVEs affecting Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016

CVESeverityCVSSEPSSStatus
CVE-2026-32202Medium4.371%KEV
CVE-2025-24990High7.86.5%KEV
CVE-2025-59230High7.82.7%KEV
CVE-2026-56155High7.80.3%KEV
CVE-2025-47827Medium4.65.2%KEV
CVE-2025-21298Critical9.874%-
CVE-2025-21285High7.556%-
CVE-2025-21277High7.539%-
CVE-2025-21293High8.815%-
CVE-2025-21309High8.115%-
CVE-2025-21307Critical9.81.9%-
CVE-2026-57092Critical9.90.9%-
CVE-2026-42990Critical9.81.0%-
CVE-2026-49172Critical9.81.0%-
CVE-2026-50447Critical9.81.0%-
CVE-2026-50518Critical9.81.0%-
CVE-2026-56159Critical9.81.0%-
CVE-2026-56190Critical9.81.0%-
CVE-2026-56188Critical9.80.6%-
CVE-2026-50380Critical9.60.8%-
CVE-2025-21176High8.82.4%-
CVE-2026-49798Critical9.30.4%-
CVE-2025-59295High8.81.9%-
CVE-2025-21233High8.81.7%-
CVE-2025-21236High8.81.7%-
CVE-2025-21237High8.81.7%-
CVE-2025-21238High8.81.7%-
CVE-2025-21240High8.81.7%-
CVE-2025-21243High8.81.7%-
CVE-2025-21244High8.81.7%-
CVE-2025-21245High8.81.7%-
CVE-2025-21246High8.81.7%-
CVE-2025-21250High8.81.7%-
CVE-2025-21223High8.81.6%-
CVE-2025-21239High8.81.5%-
CVE-2025-21241High8.81.5%-
CVE-2025-21248High8.81.5%-
CVE-2025-21252High8.81.4%-
CVE-2025-21302High8.81.4%-
CVE-2025-21303High8.81.4%-
CVE-2025-21305High8.81.4%-
CVE-2025-21306High8.81.4%-
CVE-2025-21266High8.81.3%-
CVE-2025-21273High8.81.3%-
CVE-2025-21282High8.81.3%-
CVE-2025-21286High8.81.3%-
CVE-2025-21417High8.81.2%-
CVE-2025-21339High8.81.1%-
CVE-2025-21409High8.81.1%-
CVE-2025-21411High8.81.1%-
CVE-2025-21413High8.81.1%-
CVE-2026-48564High8.80.9%-
CVE-2026-49178High8.80.9%-
CVE-2026-50666High8.80.9%-
CVE-2026-56194High8.80.9%-
CVE-2026-56647High8.80.9%-
CVE-2026-50474High8.80.8%-
CVE-2026-57090High8.80.8%-
CVE-2026-57094High8.80.8%-
CVE-2026-58594High8.80.8%-
CVE-2026-57087High8.80.8%-
CVE-2026-50444High8.80.8%-
CVE-2026-54121High8.80.8%-
CVE-2026-50369High8.80.7%-
CVE-2025-58718High8.80.6%-
CVE-2026-58608High8.80.6%-
CVE-2026-54982High8.80.5%-
CVE-2026-50370High8.80.5%-
CVE-2026-54999High8.80.4%-
CVE-2025-58715High8.80.4%-
CVE-2025-58716High8.80.4%-
CVE-2026-50477High8.80.3%-
CVE-2026-50489High8.80.3%-
CVE-2026-50692High8.80.3%-
CVE-2026-58534High8.80.3%-
CVE-2026-50646High7.84.0%-
CVE-2026-50649High7.84.0%-
CVE-2026-54107High8.80.2%-
CVE-2025-55692High7.83.6%-
CVE-2026-50509High7.83.5%-
CVE-2025-21295High8.11.6%-
CVE-2026-54122High8.40.4%-
CVE-2026-54128High8.40.4%-
CVE-2026-49184High8.40.3%-
CVE-2026-54992High8.40.3%-
CVE-2025-21297High8.11.5%-
CVE-2026-50429High8.21.1%-
CVE-2025-24052High7.82.5%-
CVE-2025-21294High8.11.2%-
CVE-2025-58722High7.82.3%-
CVE-2026-56186High8.11.1%-
CVE-2024-49120High8.11.1%-
CVE-2026-49164High8.10.8%-
CVE-2026-50439High8.10.8%-
CVE-2026-50694High8.10.8%-
CVE-2026-54995High8.10.8%-
CVE-2026-50686High8.10.7%-
CVE-2026-42900High8.10.5%-
CVE-2025-21230High7.52.7%-
CVE-2025-21231High7.52.6%-
CVE-2025-21251High7.52.6%-
CVE-2025-21218High7.52.6%-
CVE-2025-21300High7.52.6%-
CVE-2026-47304High8.10.3%-
CVE-2026-50502High8.00.7%-
CVE-2025-21276High7.52.5%-
CVE-2026-50683High8.00.6%-
CVE-2025-21270High7.52.4%-
CVE-2025-21289High7.52.4%-
CVE-2025-21290High7.52.4%-
CVE-2026-50365High8.00.5%-
CVE-2026-42975High8.00.5%-
CVE-2025-59254High7.81.1%-
CVE-2025-21220High7.52.1%-
CVE-2025-21389High7.52.0%-
CVE-2025-21281High7.80.6%-
CVE-2025-21304High7.80.6%-
CVE-2026-50652High7.51.7%-
CVE-2025-21378High7.80.6%-
CVE-2025-21287High7.80.6%-
CVE-2025-21338High7.80.5%-
CVE-2026-49796High7.80.5%-
CVE-2026-49797High7.80.5%-
CVE-2026-50308High7.80.5%-
CVE-2026-50313High7.80.5%-
CVE-2026-50347High7.80.5%-
CVE-2026-50362High7.80.5%-
CVE-2026-50386High7.80.5%-
CVE-2026-50388High7.80.5%-
CVE-2026-50448High7.80.5%-
CVE-2026-50461High7.80.5%-
CVE-2026-50471High7.80.5%-
CVE-2026-50655High7.80.5%-
CVE-2026-58609High7.80.5%-
CVE-2026-58610High7.80.5%-
CVE-2026-50650High7.80.5%-
CVE-2025-59201High7.80.5%-
CVE-2026-50462High7.80.5%-
CVE-2025-64679High7.80.5%-
CVE-2025-50152High7.80.4%-
CVE-2025-59200High7.70.8%-
CVE-2025-55701High7.80.4%-
CVE-2025-59242High7.80.4%-
CVE-2026-50697High7.80.4%-
CVE-2026-56189High7.80.4%-
CVE-2025-59277High7.80.4%-
CVE-2025-64680High7.80.4%-
CVE-2026-50498High7.80.4%-
CVE-2026-58530High7.80.4%-
CVE-2026-42982High7.80.3%-
CVE-2026-49783High7.80.3%-
CVE-2026-49792High7.80.3%-
CVE-2026-49793High7.80.3%-
CVE-2026-50306High7.80.3%-
CVE-2026-50309High7.80.3%-
CVE-2026-50318High7.80.3%-
CVE-2026-50331High7.80.3%-
CVE-2026-50332High7.80.3%-
CVE-2026-50337High7.80.3%-
CVE-2026-50357High7.80.3%-
CVE-2026-50363High7.80.3%-
CVE-2026-50387High7.80.3%-
CVE-2026-50400High7.80.3%-
CVE-2026-50402High7.80.3%-
CVE-2026-50407High7.80.3%-
CVE-2026-50412High7.80.3%-
CVE-2026-50417High7.80.3%-
CVE-2026-50421High7.80.3%-
CVE-2026-50422High7.80.3%-
CVE-2026-50433High7.80.3%-
CVE-2026-50435High7.80.3%-
CVE-2026-50441High7.80.3%-
CVE-2026-50480High7.80.3%-
CVE-2026-50494High7.80.3%-
CVE-2026-54109High7.80.3%-
CVE-2026-54115High7.80.3%-
CVE-2026-54986High7.80.3%-
CVE-2026-54987High7.80.3%-
CVE-2026-55004High7.80.3%-
CVE-2026-56175High7.80.3%-
CVE-2026-56176High7.80.3%-
CVE-2026-56182High7.80.3%-
CVE-2026-56643High7.80.3%-
CVE-2026-56644High7.80.3%-
CVE-2026-56650High7.80.3%-
CVE-2026-57091High7.80.3%-
CVE-2026-57096High7.80.3%-
CVE-2026-58532High7.80.3%-
CVE-2026-58541High7.80.3%-
CVE-2026-58601High7.80.3%-
CVE-2026-58632High7.80.3%-
CVE-2026-49176High7.80.3%-
CVE-2025-53768High7.80.3%-
CVE-2025-59187High7.80.3%-
CVE-2025-59192High7.80.3%-
CVE-2026-50311High7.80.3%-
CVE-2026-50333High7.80.3%-
CVE-2026-50344High7.80.3%-
CVE-2026-50346High7.80.3%-
CVE-2026-50351High7.80.3%-
CVE-2026-50391High7.80.3%-
CVE-2026-50405High7.80.3%-
CVE-2026-55001High7.80.3%-
CVE-2026-58540High7.80.3%-
CVE-2025-59275High7.80.3%-
CVE-2025-59278High7.80.3%-
CVE-2025-58714High7.80.3%-
CVE-2026-50476High7.80.3%-
CVE-2026-50688High7.80.3%-
CVE-2025-55328High7.80.3%-
CVE-2026-50321High7.80.2%-
CVE-2026-50667High7.80.2%-
CVE-2026-50673High7.80.2%-
CVE-2026-50330High7.51.3%-
CVE-2026-50328High7.51.2%-
CVE-2026-40378High7.51.2%-
CVE-2026-47302High7.51.2%-
CVE-2026-49787High7.51.2%-
CVE-2026-49788High7.51.2%-
CVE-2026-50304High7.51.2%-
CVE-2026-50355High7.51.2%-
CVE-2026-50368High7.51.2%-
CVE-2026-50411High7.51.2%-
CVE-2026-50496High7.51.2%-
CVE-2026-50525High7.51.2%-
CVE-2026-50527High7.51.2%-
CVE-2026-50647High7.51.2%-
CVE-2026-50648High7.51.2%-
CVE-2026-50653High7.51.2%-
CVE-2026-50695High7.51.2%-
CVE-2026-54119High7.51.2%-
CVE-2026-54983High7.51.2%-
CVE-2026-58627High7.51.2%-
CVE-2026-49181High7.51.2%-
CVE-2025-58726High7.51.0%-
CVE-2026-50470High7.51.0%-
CVE-2025-21296High7.50.8%-
CVE-2026-50500High7.50.7%-
CVE-2026-50505High7.50.7%-
CVE-2025-21299High7.12.2%-
CVE-2026-50685High7.50.7%-
CVE-2026-56648High7.50.5%-
CVE-2026-58531High7.50.5%-
CVE-2025-21331High7.31.1%-
CVE-2026-49171High7.50.3%-
CVE-2025-55335High7.40.3%-
CVE-2025-55687High7.40.3%-
CVE-2025-25004High7.30.5%-
CVE-2025-54957High7.01.6%-
CVE-2026-49789High7.30.4%-

Showing the 250 highest-risk of 448 CVEs. See all in the CVE reference.

Updates (KBs) for Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50995352026-07-14Critical9.971%258KEV
KB50668362025-10-14High8.86.5%78KEV
KB50499932025-01-14Critical9.874%112-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5126651: the full CVE list KB5122876: patch details KB5126655: patch details KB5126657 install notes and severity KB5126052 download and what it fixes KB5126646 download and what it fixes KB5122882: patch details KB5129238 install notes and severity KB5126868: the full CVE list KB5129235: the full CVE list
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.