Mono-project Mono — known CVE vulnerabilities

Every CVE whose affected-product data names Mono-project Mono, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2015-2320 — CVSS 9.8 (critical): The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback.
• CVE-2023-26314 — CVSS 8.8 (high): The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type…
• CVE-2015-2318 — CVSS 8.1 (high): The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate…
• CVE-2012-3543 — CVSS 7.5 (high): mono 2.10.x ASP.NET Web Form Hash collision DoS
• CVE-2015-2319 — CVSS 7.5 (high): The TLS stack in Mono before 3.12.1 makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via…