coldbraid

CVE-2017-8759 Microsoft .NET Framework

Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take control of an affected system.

CVSS
not scored

CWE-20

On CISA’s exploited list

Microsoft .NET Framework Remote Code Execution Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)