CVE-2018-8260

2018-07-1100:00:00

microsoft

www.cve.org

AI Score

8.1

Confidence

High

EPSS

0.129

Percentile

95.5%

JSON

A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka “.NET Framework Remote Code Execution Vulnerability.” This affects .NET Framework 4.7.2, Microsoft .NET Framework 4.7.2.

CNA Affected

[
  {
    "product": ".NET Framework",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "4.7.2 Developer Pack"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "4.7.2 on Windows 10 Version 1607 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 10 Version 1607 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 10 Version 1703 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 10 Version 1703 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 10 Version 1709 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 10 Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 10 Version 1803 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 10 Version 1803 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 7 for 32-bit Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 7 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 8.1 for 32-bit systems"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows 8.1 for x64-based systems"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows RT 8.1"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows Server 2012"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows Server 2012 (Server Core installation)"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows Server 2012 R2"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows Server 2012 R2 (Server Core installation)"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows Server 2016"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows Server 2016  (Server Core installation)"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows Server, version 1709  (Server Core Installation)"
      },
      {
        "status": "affected",
        "version": "4.7.2 on Windows Server, version 1803  (Server Core Installation)"
      }
    ]
  }
]