Microsoft .NET Framework 4.6/4.6.1/4.6.2 vulnerabilities
5 vulnerabilities
Known vulnerabilities in Microsoft .NET Framework 4.6/4.6.1/4.6.2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-1083microsoftmicrosoft .net framework 2.0+41
EPSS score7.80%
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'.CVE-2019-1006microsoftidentitymodel+63EPSS score6.02%
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.CVE-2019-1113microsoftmicrosoft .net framework 2.0+45EPSS score10.00%
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'.CVE-2019-0613microsoftmicrosoft .net framework 2.0+15EPSS score15.42%
A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'.CVE-2019-0657microsoftmicrosoft .net framework 2.0+40EPSS score4.52%
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.