Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-1066

Опубликовано: 21 мая 2020
Источник: nvd
CVSS3: 7.8
CVSS2: 4.6
EPSS Средний

Описание

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the vulnerability by correcting how .NET Framework activates COM objects., aka '.NET Framework Elevation of Privilege Vulnerability'.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*

EPSS

Процентиль: 97%
0.29696
Средний

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.8
redhat
больше 5 лет назад

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the vulnerability by correcting how .NET Framework activates COM objects., aka '.NET Framework Elevation of Privilege Vulnerability'.

msrc
больше 5 лет назад

.NET Framework Elevation of Privilege Vulnerability

CVSS3: 7.8
github
больше 3 лет назад

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the vulnerability by correcting how .NET Framework activates COM objects., aka '.NET Framework Elevation of Privilege Vulnerability'.

CVSS3: 7.8
fstec
больше 5 лет назад

Уязвимость программной платформы Microsoft .NET Framework, связанная с недостатками разграничения доступа, позволяющая нарушителю повысть свои привилегии

EPSS

Процентиль: 97%
0.29696
Средний

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo