7.8
High
Exploited
CVE-2017-8759 Microsoft .NET Framework Remote Code Execution Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-20
Description
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft .NET Framework | Versions not published |
References
- 100742 www.securityfocus.com
- github.com github.com
- github.com github.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 42711 www.exploit-db.com
- 1039324 www.securitytracker.com
- github.com github.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified