Microsoft Microsoft .Net Framework
12 CVEs affecting Microsoft Microsoft .Net Framework. Latest disclosed: 2019-01-08. Critical: 2, High: 9.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-8540 | Critical | 9.8 | 2018-12-12 | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vuln… |
CVE-2018-8421 | Critical | 9.8 | 2018-09-13 | A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execution Vulnerability."… |
CVE-2018-8260 | High | 8.8 | 2018-07-11 | A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remote Code Exe… |
CVE-2018-8284 | High | 8.1 | 2018-07-11 | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vuln… |
CVE-2018-8202 | High | 7.8 | 2018-07-11 | An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET Framework Elevation… |
CVE-2018-1039 | High | 7.8 | 2018-05-09 | A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework Device Guard Securit… |
CVE-2017-8759 | High | 7.8 | 2017-09-13 | Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application… |
CVE-2019-0545 | High | 7.5 | 2019-01-08 | An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka… |
CVE-2018-8517 | High | 7.5 | 2018-12-12 | A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." Thi… |
CVE-2018-8360 | High | 7.5 | 2018-08-15 | An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments, aka… |
CVE-2017-0248 | High | 7.5 | 2017-05-12 | Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a cer… |
CVE-2018-8356 | Medium | 5.5 | 2018-07-11 | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Fe… |