# Microsoft .NET Framework 4.8 on Windows Server 2012 R2.

Every CVE that names Microsoft .NET Framework 4.8 on Windows Server 2012 R2 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [XML injection in Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 and others](https://agentprime.io/advisories/CVE-2020-0646.md)
  `CVE-2020-0646` · CVE record: Microsoft Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 and 4 more · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.99 · Not analysed yet · Published 14 Jan 2020 · Tags: Other injection
- [A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary…](https://agentprime.io/advisories/CVE-2020-0605.md)
  `CVE-2020-0605` · CVE record: Microsoft .NET Core and 4 more · No CVSS score · EPSS 0.18 · Not analysed yet · Published 14 Jan 2020
- [An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerabil…](https://agentprime.io/advisories/CVE-2019-1142.md)
  `CVE-2019-1142` · CVE record: Microsoft Microsoft .NET Framework 4.5.2 and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary…](https://agentprime.io/advisories/CVE-2019-1113.md)
  `CVE-2019-1113` · CVE record: Microsoft Microsoft .NET Framework 4.5.2 and 4 more · No CVSS score · Not analysed yet · Published 29 Jul 2019
- [A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1083.md)
  `CVE-2019-1083` · CVE record: Microsoft Microsoft .NET Framework 4.5.2 and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0864.md)
  `CVE-2019-0864` · CVE record: Microsoft Microsoft .NET Framework 4.5.2 and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-net-framework-4-8-on-windows-server-2012-r2>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-net-framework-4-8-on-windows-server-2012-r2/>. Everything for agents: <https://agentprime.io/llms.txt>.