GHSA-r4mw-gxf7-vxr9

ghsaUSosv

Remote code execution in Microsoft.WindowsDesktop.App.Ref

view advisory published 2022-05-24Licence: CC-BY-4.0

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0605.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-0606US	high8.8	17.2% (97th)	—	2020-01-14
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability…

references

External citations — patches, advisories, analysis.

https://github.com/dotnet/announcements/issues/149WEB
https://github.com/github/advisory-database/issues/302WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-0606ADVISORY
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0606WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan