Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) vulnerabilities

2 known vulnerabilities in Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) from Microsoft. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Exploited

  CVE-2020-1147Jul 14, 2020MicrosoftEPSS 95.8%

  A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulner

• 9.8 Critical severity

  Microsoft .NET Framework Remote Code Execution Exploited

  CVE-2020-0646Jan 14, 2020MicrosoftEPSS 99.2%

  A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.