Patch tracker / Products / Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 20H2

Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 20H2: vulnerabilities and security updates

Every CVE affecting Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 20H2 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
3
Updates (KBs)
1
Actively exploited (KEV)
0
Critical Severity
0

CVEs affecting Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 20H2

CVESeverityCVSSEPSSStatus
CVE-2026-23666High7.52.4%-
CVE-2026-33116High7.52.4%-
CVE-2026-32226Medium5.92.4%-

Updates (KBs) for Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 20H2

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50824262026-04-14High7.52.4%3-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5122876 install notes and severity KB5126052: the full CVE list KB5129238: the full CVE list KB5122882 download and what it fixes KB5129235 download and what it fixes KB5123099: patch details KB5122871: patch details KB5129239: patch details KB5120708 download and what it fixes KB5129241 download and what it fixes
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.