Non notée
CVE-2020-1046 A remote code execution vulnerability exists when Microsoft .NET Framework processes input
Description
A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a web application. The security update addresses the vulnerability by correcting how .NET Framework processes input.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft .NET Framework 3.5 3.5 | 3.5.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 3.5 AND 4.8 4.8 | 4.8.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 3.5 AND 4.7.2 4.7 | 4.7.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 2.0 Service Pack 2 2.0 | 2.0.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 3.5.1 3.5 | 3.5.0 → dernières | Pas de correctif indiqué |
Références
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft .NET Framework 3.5
Les 83 CVE de Microsoft .NET Framework 3.5 →
CVE-2026-97801
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering…
7.5
Élevée
CVE-2026-58280
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network
7.5
Élevée
CVE-2026-97788
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose…
7.5
Élevée
CVE-2026-96959
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a…
7.5
Élevée