Known Vulnerabilities for products from Mono

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Mono".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-63876 json Not Provided 2026-07-19 2026-07-19
CVE-2023-26314 json Not Provided 2023-02-22 2026-05-20
CVE-2020-12473 json MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ... 7.2 - HIGH 2020-04-29 2021-07-21
CVE-2020-12472 json MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description. 5.4 - MEDIUM 2020-04-29 2020-05-04
CVE-2020-12471 json MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.... 9.8 - CRITICAL 2020-04-29 2020-05-04
CVE-2020-12470 json MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template. 7.2 - HIGH 2020-04-29 2020-05-04
CVE-2012-3382 json Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandl... Not Provided 2012-07-12 2026-04-29
CVE-2011-0992 json Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers t... Not Provided 2011-04-13 2026-04-29
CVE-2011-0991 json Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers t... Not Provided 2011-04-13 2026-04-29
CVE-2011-0990 json Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2... Not Provided 2011-04-13 2026-04-29
CVE-2011-0989 json The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 i... Not Provided 2011-04-13 2026-04-29
CVE-2010-4254 json Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic metho... Not Provided 2010-12-06 2026-04-29
CVE-2010-4225 json Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the sou... Not Provided 2011-01-11 2026-04-29
CVE-2010-4159 json Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a ... Not Provided 2010-11-17 2026-04-29
CVE-2010-1459 json The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which all... Not Provided 2010-05-27 2026-04-29
CVE-2008-3906 json CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and ... Not Provided 2008-09-04 2026-04-23
CVE-2008-3422 json Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attac... Not Provided 2008-07-31 2026-04-23
CVE-2007-5473 json StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source ... Not Provided 2007-10-18 2026-04-23
CVE-2007-5197 json Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute a... Not Provided 2007-11-02 2026-04-23
CVE-2006-6104 json The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which al... Not Provided 2006-12-21 2026-04-23
Results limited to 20 most recent vulnerabilities

Known software with vulnerabilities from Mono

Type Vendor Product Version
ApplicationMonoMono-
ApplicationMonoMonox5.1.40.5152

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report