CVE-2018-8260

EUVD-2018-19926
A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remote Code Execution Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 4.7.2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
microsoft.net_framework
4.7.2
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
1607 (x64, x86)
KB4338814
1607 (x64, x86)
KB4345418
1703 (x64, x86)
KB4345419
1709 (x64, x86)
KB4345420
1803 (x64, x86)
KB4345421
Windows 7
Service Pack 1 (x64, x86)
KB4338606
Windows 8.1
(x64, x86)
KB4338419
(x64, x86)
KB4338605
Windows RT 8.1
All
KB4338419
Windows Server
1709 Server Core
KB4345420
1803 Server Core
KB4345421
Windows Server 2008 R2
Service Pack 1 (x64)
KB4338606
Service Pack 1 Server Core (x64)
KB4338606
Windows Server 2012
Server Core
KB4338604
Standard
KB4338604
Windows Server 2012 R2
Server Core
KB4338419
Server Core
KB4338605
Standard
KB4338419
Standard
KB4338605
Windows Server 2016
Server Core
KB4338814
Standard
KB4338814
Standard
KB4345418
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/104666
http://www.securitytracker.com/id/1041257
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8260
http://www.securityfocus.com/bid/104666
http://www.securitytracker.com/id/1041257
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8260