Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 On Windows Server 2016 vulnerabilities

4 vulnerabilities

Known vulnerabilities in Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 On Windows Server 2016, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2020-1147microsoftmicrosoft .net framework 2.0+132KEV
EPSS score
93.97%
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
9.3CVE-2020-0605microsoftmicrosoft .net framework 3.0+53
EPSS score
17.11%
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0606.
9.3CVE-2020-0606microsoftmicrosoft .net framework 3.0+55
EPSS score
17.19%
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0605.
10CVE-2020-0646microsoftmicrosoft .net framework 3.0+52KEV
EPSS score
99.22%
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.