Filtered by vendor Microsoft Subscriptions
Filtered by product .net Subscriptions
Total 82 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-1046 1 Microsoft 9 .net, .net Framework, Windows 10 and 6 more 2024-11-21 7.8 High
A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a web application. The security update addresses the vulnerability by correcting how .NET Framework processes input.
CVE-2020-16937 1 Microsoft 10 .net, .net Framework, Windows 10 and 7 more 2024-11-21 4.7 Medium
<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system's memory.</p> <p>To exploit the vulnerability, an authenticated attacker would need to run a specially crafted application.</p> <p>The update addresses the vulnerability by correcting how the .NET Framework handles objects in memory.</p>