Описание
.NET Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| .NET 8.0 installed on Windows | ||
| .NET 9.0 installed on Windows | ||
| Microsoft Visual Studio 2026 version 18.7 | ||
| Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems | ||
| Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems | ||
| Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems | ||
| Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems | ||
| Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems | ||
| Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems | ||
| Microsoft .NET Framework 4.8 on Windows Server 2016 |
Показывать по
10
Возможность эксплуатации
Publicly Disclosed
No
Exploited
No
Latest Software Release
Exploitation Less Likely
EPSS
Процентиль: 58%
0.00938
Низкий
7.8 High
CVSS3
Связанные уязвимости
CVSS3: 7.8
ubuntu
2 месяца назад
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
CVSS3: 7.8
redhat
2 месяца назад
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
CVSS3: 7.8
nvd
2 месяца назад
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
CVSS3: 7.8
fstec
2 месяца назад
Уязвимость программных платформ .NET и Microsoft Visual Studio, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код
EPSS
Процентиль: 58%
0.00938
Низкий
7.8 High
CVSS3