* November Servicing & .NET 10GA Updates * Create cve.md --------- Co-authored-by: Rahul Bhandari <rbhanda@microsoft.com>
5.0 KiB
5.0 KiB
.NET 8 CVEs
The .NET Team releases monthly updates for .NET 8 on Patch Tuesday. These updates often include security fixes. If you are on an older version, your app may be vulnerable.
Your app needs to be on the latest .NET 8 patch version to be secure. The longer you wait to upgrade, the greater the exposure to CVEs.
Which CVEs apply to my app?
Your app may be vulnerable to the following published security CVEs if you are using an older version.
- 8.0.22 (November 2025)
- No new CVEs.
- 8.0.21 (October 2025)
- 8.0.20 (September 2025)
- No new CVEs.
- 8.0.19 (August 2025)
- No new CVEs.
- 8.0.18 (July 2025)
- No new CVEs.
- 8.0.17 (June 2025)
- 8.0.16 (May 2025)
- 8.0.15 (April 2025)
- 8.0.14 (March 2025)
- 8.0.12 (January 2025)
- 8.0.10 (October 2024)
- 8.0.8 (August 2024)
- 8.0.7 (July 2024)
- 8.0.6 (May 28 2024)
- No new CVEs.
- 8.0.5 (May 2024)
- 8.0.4 (April 2024)
- 8.0.3 (March 2024)
- 8.0.2 (February 2024)
- 8.0.1 (January 2024)
- 8.0.0 (November 2023)
The CVE exposure is cumulative. For example, 8.0.0 users may be vulnerable to the CVEs present in 8.0.0 and newer releases. Similarly, 8.0.3 users may be vulnerable to the CVEs present in 8.0.4 and newer releases. The latest release is not vulnerable to any published CVEs.