.NET Framework
No CISA KEV deadline is open. CISA last added a .NET Framework CVE on 4 Feb 2025.
Tracked since 13 Oct · latest article Wed 14 Oct · RSS
Exploited, by due date
CSV downloadDeadlines passed
6 articles from 6 outlets since 13 Oct; the latest 12 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 14 Oct · 12:11 UTC | Malwarebytes | Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Zero Day |
| Wed 14 Oct · 07:31 UTC | SecurityWeek | Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings |
| Wed 14 Oct · 05:14 UTC | The Hacker News | Microsoft patches 1,413 flaws as hackers exploit Windows bug |
| Wed 14 Oct · 04:37 UTC | SecurityOnline | Microsoft Fixes Actively Exploited Windows Flaw in Record Patch Release |
| Wed 14 Oct · 00:01 UTC | Krebs on Security | Microsoft fixes over 1,400 flaws, including a Windows zero day |
| Tue 13 Oct · 23:01 UTC | Dark Reading | Microsoft patches actively exploited Windows flaw that bypasses security checks |
Who reported 6 outlets, last 12 months
- Dark Reading1
- Krebs on Security1
- SecurityOnline1
- The Hacker News1
- Malwarebytes1
- SecurityWeek1
- Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Zero DayMalwarebytes
- Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warningsSecurityWeek
- Microsoft patches 1,413 flaws as hackers exploit Windows bugThe Hacker News
- Microsoft Fixes Actively Exploited Windows Flaw in Record Patch ReleaseSecurityOnline
- Microsoft fixes over 1,400 flaws, including a Windows zero dayKrebs on Security
- Microsoft patches actively exploited Windows flaw that bypasses security checksDark Reading
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.