What is CVE-2018-8540?

CVE-2018-8540 is a vulnerability in Microsoft .Net Framework. Published 2018-12-12.

Is CVE-2018-8540 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft .Net Framework

CVE-2018-8540

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework…

EPSS: 0.200 (95.6th percentile) — read the EPSS interpretation.

Affected products

Microsoft .Net Framework — versions 3.5 on Windows 10 for 32-bit Systems, 3.5 on Windows 10 for x64-based Systems, 3.5 on Windows 10 Version 1607 for 32-bit Systems

Public proof-of-concept exploits

p-/p-

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8540 (x_refsource_CONFIRM)
106073 (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2018-8540?: CVE-2018-8540 is a vulnerability in Microsoft .Net Framework. Published 2018-12-12.
Is CVE-2018-8540 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.