Advisories · Technology
Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1.
Every CVE that names Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
XML injection in Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 and others
- Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2
- Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
- Other injection
-
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary…
- Microsoft .NET Framework 4.5.2
- Microsoft .NET Framework 4.6
-
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'.
- Microsoft .NET Framework 4.5.2
- Microsoft .NET Framework 4.6
-
Microsoft Windows: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF)…
- Microsoft Windows
- Microsoft Windows Server
-
A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'.
- Microsoft .NET Framework 4.5.2
- Microsoft .NET Framework 4.6