Microsoft Microsoft .NET Framework
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-0545 | 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) c | HIGH 7.5 | 9.6 % | ||
| CVE-2018-8540 | 3.5 on Windows 10 for 32-bit Systems ; 3.5 on Windows 10 for x64-based Systems ; 3.5 on Windows 10 Version 1607 for 32-bit Systems ; … | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote | CRITICAL 9.8 | 22 % | ||
| CVE-2018-8517 | 3.5 on Windows 10 Version 1607 for 32-bit Systems ; 3.5 on Windows 10 Version 1607 for x64-based Systems ; 3.5 on Windows 10 Version 1703 for 32-bit Systems ; … | A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service | HIGH 7.5 | 5.7 % | ||
| CVE-2018-8421 | 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execut | CRITICAL 9.8 | 29 % | ||
| CVE-2018-8360 | 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenan | HIGH 7.5 | 9.6 % | ||
| CVE-2018-8356 | 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 ; 3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 ; 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 ; … | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Fr | MEDIUM 5.5 | 0.7 % | ||
| CVE-2018-8284 | 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote | HIGH 8.1 | 46 % | ||
| CVE-2018-8260 | 4.7.2 on Windows 10 Version 1607 for 32-bit Systems ; 4.7.2 on Windows 10 Version 1607 for x64-based Systems ; 4.7.2 on Windows 10 Version 1703 for 32-bit Systems ; … | A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framew | HIGH 8.8 | 16 % | ||
| CVE-2018-8202 | 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET F | HIGH 7.8 | 1.3 % | ||
| CVE-2018-1039 | 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 ; 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 ; … | A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework D | HIGH 7.8 | 1.3 % |