Not rated
CVE-2020-1066 An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their…
Description
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the vulnerability by correcting how .NET Framework activates COM objects.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft .NET Framework 3.0 | Versions not published | |
| Microsoft .NET Framework 3.5.1 3.5 | 3.5.0 → latest | No fix stated |
| Microsoft .NET Framework 3.0 Service Pack 2 3.0 | 3.0.0 → latest | No fix stated |
References
- .NET Framework Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft .NET Framework 3.0
The 15 CVEs of Microsoft .NET Framework 3.0 →
CVE-2020-1147
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
7.8
High
CVE-2020-1108
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests
Not rated
CVE-2020-0646
Microsoft .NET Framework Remote Code Execution Vulnerability
9.8
Critical
CVE-2020-0606
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a…
Not rated