CVE-2018-8260

Scores

EPSS

0.332low33.2%
0%20%40%60%80%100%

Percentile: 33.2%

CVSS

8.8high3.x
0246810

CVSS Score: 8.8/10

All CVSS Scores

CVSS 3.x
8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS 2.0
6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka “.NET Framework Remote Code Execution Vulnerability.” This affects .NET Framework 4.7.2, Microsoft .NET Framework 4.7.2.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

msrcnvd

CWEs

CWE-20

Vulnerable Software (71)

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator":...

Source: nvd

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 16299.1776

Operating System: Windows 16299 build 1776

Identifier: KB4554342

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 17134.376

Operating System: Windows 17134 build 376

Identifier: KB4462933

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Operating System: Windows

Identifier: KB4338418

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Operating System: Windows

Identifier: KB4338604

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Operating System: Windows

Identifier: KB4338420

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Operating System: Windows

Identifier: KB4338606

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 14393.2363

Operating System: Windows 14393 build 2363

Identifier: KB4338814

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 14393.2368

Operating System: Windows 14393 build 2368

Identifier: KB4345418

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 16299.547

Operating System: Windows 16299 build 547

Identifier: KB4338825

Source: msrc