Non notée
CVE-2020-1066 An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their…
Description
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the vulnerability by correcting how .NET Framework activates COM objects.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft .NET Framework 3.0 | Versions non publiées | |
| Microsoft .NET Framework 3.5.1 3.5 | 3.5.0 → dernières | Pas de correctif indiqué |
| Microsoft .NET Framework 3.0 Service Pack 2 3.0 | 3.0.0 → dernières | Pas de correctif indiqué |
Références
- .NET Framework Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft .NET Framework 3.0
Les 15 CVE de Microsoft .NET Framework 3.0 →
CVE-2020-1147
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
7.8
Élevée
CVE-2020-1108
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests
Non notée
CVE-2020-0646
Microsoft .NET Framework Remote Code Execution Vulnerability
9.8
Critique
CVE-2020-0606
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a…
Non notée