Microsoft Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1147 | | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the | HIGH 7.8 | 94 % | KEV | |
| CVE-2020-0646 | unspecified | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote | CRITICAL 9.8 | 99 % | KEV | |
| CVE-2020-0606 | unspecified | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 17 % | ||
| CVE-2020-0605 | | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 17 % | ||
| CVE-2019-1142 | | An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locat | MEDIUM 5.5 | 1.0 % | ||
| CVE-2019-1113 | | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s | HIGH 8.8 | 10.0 % | ||
| CVE-2019-1083 | | A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of S | HIGH 7.5 | 7.8 % | ||
| CVE-2019-1006 | | An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing sign | HIGH 7.5 | 6.1 % | ||
| CVE-2019-0981 | | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core | HIGH 7.5 | 4.9 % | ||
| CVE-2019-0980 | | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core | HIGH 7.5 | 4.9 % | ||
| CVE-2019-0864 | | A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Servic | MEDIUM 5.5 | 1.4 % | ||
| CVE-2019-0820 | | A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Co | HIGH 7.5 | 5.7 % |