Patch tracker / Products / Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016

Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016: vulnerabilities and security updates

Every CVE affecting Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
450
Updates (KBs)
3
Actively exploited (KEV)
5
Critical Severity
12

CVEs affecting Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016

CVESeverityCVSSEPSSStatus
CVE-2025-24990High7.86.4%KEV
CVE-2025-59230High7.86.4%KEV
CVE-2026-56155High7.84.9%KEV
CVE-2025-47827Medium4.66.4%KEV
CVE-2026-32202Medium4.34.9%KEV
CVE-2025-21298Critical9.881%-
CVE-2025-21307Critical9.881%-
CVE-2024-49120High8.184%-
CVE-2025-21176High8.881%-
CVE-2025-21223High8.881%-
CVE-2025-21233High8.881%-
CVE-2025-21236High8.881%-
CVE-2025-21237High8.881%-
CVE-2025-21238High8.881%-
CVE-2025-21239High8.881%-
CVE-2025-21240High8.881%-
CVE-2025-21241High8.881%-
CVE-2025-21243High8.881%-
CVE-2025-21244High8.881%-
CVE-2025-21245High8.881%-
CVE-2025-21246High8.881%-
CVE-2025-21248High8.881%-
CVE-2025-21250High8.881%-
CVE-2025-21252High8.881%-
CVE-2025-21266High8.881%-
CVE-2025-21273High8.881%-
CVE-2025-21282High8.881%-
CVE-2025-21286High8.881%-
CVE-2025-21293High8.881%-
CVE-2025-21302High8.881%-
CVE-2025-21303High8.881%-
CVE-2025-21305High8.881%-
CVE-2025-21306High8.881%-
CVE-2025-21339High8.881%-
CVE-2025-21409High8.881%-
CVE-2025-21411High8.881%-
CVE-2025-21413High8.881%-
CVE-2025-21417High8.881%-
CVE-2025-21294High8.181%-
CVE-2025-21295High8.181%-
CVE-2025-21297High8.181%-
CVE-2025-21309High8.181%-
CVE-2025-21281High7.881%-
CVE-2025-21287High7.881%-
CVE-2025-21304High7.881%-
CVE-2025-21338High7.881%-
CVE-2025-21378High7.881%-
CVE-2025-21218High7.581%-
CVE-2025-21220High7.581%-
CVE-2025-21230High7.581%-
CVE-2025-21231High7.581%-
CVE-2025-21251High7.581%-
CVE-2025-21270High7.581%-
CVE-2025-21276High7.581%-
CVE-2025-21277High7.581%-
CVE-2025-21285High7.581%-
CVE-2025-21289High7.581%-
CVE-2025-21290High7.581%-
CVE-2025-21296High7.581%-
CVE-2025-21300High7.581%-
CVE-2025-21389High7.581%-
CVE-2025-21331High7.381%-
CVE-2025-21299High7.181%-
CVE-2025-21211Medium6.881%-
CVE-2024-7344Medium6.781%-
CVE-2025-21226Medium6.681%-
CVE-2025-21227Medium6.681%-
CVE-2025-21228Medium6.681%-
CVE-2025-21229Medium6.681%-
CVE-2025-21232Medium6.681%-
CVE-2025-21249Medium6.681%-
CVE-2025-21255Medium6.681%-
CVE-2025-21256Medium6.681%-
CVE-2025-21258Medium6.681%-
CVE-2025-21260Medium6.681%-
CVE-2025-21261Medium6.681%-
CVE-2025-21263Medium6.681%-
CVE-2025-21265Medium6.681%-
CVE-2025-21310Medium6.681%-
CVE-2025-21324Medium6.681%-
CVE-2025-21327Medium6.681%-
CVE-2025-21341Medium6.681%-
CVE-2025-21193Medium6.581%-
CVE-2025-21217Medium6.581%-
CVE-2025-21272Medium6.581%-
CVE-2025-21288Medium6.581%-
CVE-2025-21301Medium6.581%-
CVE-2025-21308Medium6.581%-
CVE-2025-21314Medium6.581%-
CVE-2025-21278Medium6.281%-
CVE-2025-21202Medium6.181%-
CVE-2025-21225Medium5.981%-
CVE-2025-21242Medium5.981%-
CVE-2025-21336Medium5.681%-
CVE-2025-21257Medium5.581%-
CVE-2025-21274Medium5.581%-
CVE-2025-21280Medium5.581%-
CVE-2025-21284Medium5.581%-
CVE-2025-21316Medium5.581%-
CVE-2025-21318Medium5.581%-
CVE-2025-21319Medium5.581%-
CVE-2025-21320Medium5.581%-
CVE-2025-21321Medium5.581%-
CVE-2025-21323Medium5.581%-
CVE-2025-21374Medium5.581%-
CVE-2025-21213Medium4.681%-
CVE-2025-21215Medium4.681%-
CVE-2025-21189Medium4.381%-
CVE-2025-21219Medium4.381%-
CVE-2025-21268Medium4.381%-
CVE-2025-21269Medium4.381%-
CVE-2025-21328Medium4.381%-
CVE-2025-21329Medium4.381%-
CVE-2025-21332Medium4.381%-
CVE-2025-21210Medium4.281%-
CVE-2025-21214Medium4.281%-
CVE-2025-21312Low2.481%-
CVE-2025-55248Medium4.866%-
CVE-2026-57092Critical9.94.9%-
CVE-2026-42990Critical9.84.9%-
CVE-2026-49172Critical9.84.9%-
CVE-2026-50447Critical9.84.9%-
CVE-2026-50518Critical9.84.9%-
CVE-2026-56159Critical9.84.9%-
CVE-2026-56188Critical9.84.9%-
CVE-2026-56190Critical9.84.9%-
CVE-2026-50380Critical9.64.9%-
CVE-2026-49798Critical9.34.9%-
CVE-2025-58715High8.86.4%-
CVE-2025-58716High8.86.4%-
CVE-2025-58718High8.86.4%-
CVE-2025-59295High8.86.4%-
CVE-2026-48564High8.84.9%-
CVE-2026-49178High8.84.9%-
CVE-2026-50369High8.84.9%-
CVE-2026-50370High8.84.9%-
CVE-2026-50444High8.84.9%-
CVE-2026-50474High8.84.9%-
CVE-2026-50477High8.84.9%-
CVE-2026-50489High8.84.9%-
CVE-2026-50666High8.84.9%-
CVE-2026-50692High8.84.9%-
CVE-2026-54107High8.84.9%-
CVE-2026-54121High8.84.9%-
CVE-2026-54982High8.84.9%-
CVE-2026-54999High8.84.9%-
CVE-2026-56194High8.84.9%-
CVE-2026-56647High8.84.9%-
CVE-2026-57087High8.84.9%-
CVE-2026-57090High8.84.9%-
CVE-2026-57094High8.84.9%-
CVE-2026-58534High8.84.9%-
CVE-2026-58594High8.84.9%-
CVE-2026-58608High8.84.9%-
CVE-2026-49184High8.44.9%-
CVE-2026-54122High8.44.9%-
CVE-2026-54128High8.44.9%-
CVE-2026-54992High8.44.9%-
CVE-2026-50429High8.24.9%-
CVE-2025-64679High7.86.4%-
CVE-2025-64680High7.86.4%-
CVE-2025-24052High7.86.4%-
CVE-2025-50152High7.86.4%-
CVE-2025-53768High7.86.4%-
CVE-2025-55328High7.86.4%-
CVE-2025-55692High7.86.4%-
CVE-2025-55701High7.86.4%-
CVE-2025-58714High7.86.4%-
CVE-2025-58722High7.86.4%-
CVE-2025-59187High7.86.4%-
CVE-2025-59192High7.86.4%-
CVE-2025-59201High7.86.4%-
CVE-2025-59242High7.86.4%-
CVE-2025-59254High7.86.4%-
CVE-2025-59275High7.86.4%-
CVE-2025-59277High7.86.4%-
CVE-2025-59278High7.86.4%-
CVE-2026-42900High8.14.9%-
CVE-2026-47304High8.14.9%-
CVE-2026-49164High8.14.9%-
CVE-2026-50439High8.14.9%-
CVE-2026-50686High8.14.9%-
CVE-2026-50694High8.14.9%-
CVE-2026-54995High8.14.9%-
CVE-2026-56186High8.14.9%-
CVE-2025-59200High7.76.4%-
CVE-2026-40400High8.04.9%-
CVE-2026-42975High8.04.9%-
CVE-2026-50365High8.04.9%-
CVE-2026-50502High8.04.9%-
CVE-2026-50683High8.04.9%-
CVE-2025-58726High7.56.4%-
CVE-2026-42982High7.84.9%-
CVE-2026-49176High7.84.9%-
CVE-2026-49783High7.84.9%-
CVE-2026-49792High7.84.9%-
CVE-2026-49793High7.84.9%-
CVE-2026-49796High7.84.9%-
CVE-2026-49797High7.84.9%-
CVE-2026-50306High7.84.9%-
CVE-2026-50308High7.84.9%-
CVE-2026-50309High7.84.9%-
CVE-2026-50311High7.84.9%-
CVE-2026-50313High7.84.9%-
CVE-2026-50318High7.84.9%-
CVE-2026-50321High7.84.9%-
CVE-2026-50331High7.84.9%-
CVE-2026-50332High7.84.9%-
CVE-2026-50333High7.84.9%-
CVE-2026-50337High7.84.9%-
CVE-2026-50344High7.84.9%-
CVE-2026-50346High7.84.9%-
CVE-2026-50347High7.84.9%-
CVE-2026-50351High7.84.9%-
CVE-2026-50357High7.84.9%-
CVE-2026-50362High7.84.9%-
CVE-2026-50363High7.84.9%-
CVE-2026-50386High7.84.9%-
CVE-2026-50387High7.84.9%-
CVE-2026-50388High7.84.9%-
CVE-2026-50391High7.84.9%-
CVE-2026-50400High7.84.9%-
CVE-2026-50402High7.84.9%-
CVE-2026-50405High7.84.9%-
CVE-2026-50407High7.84.9%-
CVE-2026-50412High7.84.9%-
CVE-2026-50417High7.84.9%-
CVE-2026-50421High7.84.9%-
CVE-2026-50422High7.84.9%-
CVE-2026-50433High7.84.9%-
CVE-2026-50435High7.84.9%-
CVE-2026-50441High7.84.9%-
CVE-2026-50448High7.84.9%-
CVE-2026-50461High7.84.9%-
CVE-2026-50462High7.84.9%-
CVE-2026-50471High7.84.9%-
CVE-2026-50476High7.84.9%-
CVE-2026-50480High7.84.9%-
CVE-2026-50494High7.84.9%-
CVE-2026-50498High7.84.9%-
CVE-2026-50509High7.84.9%-
CVE-2026-50646High7.84.9%-
CVE-2026-50649High7.84.9%-
CVE-2026-50650High7.84.9%-
CVE-2026-50655High7.84.9%-
CVE-2026-50667High7.84.9%-
CVE-2026-50673High7.84.9%-
CVE-2026-50688High7.84.9%-
CVE-2026-50697High7.84.9%-
CVE-2026-54109High7.84.9%-

Showing the 250 highest-risk of 450 CVEs. See all in the CVE reference.

Updates (KBs) for Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50995352026-07-14Critical9.94.9%262KEV
KB50668362025-10-14High8.86.4%76KEV
KB50499932025-01-14Critical9.881%112-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.