Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

18 records in Powershell Core · all components

Priority HIGH 66

.NET Core Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30096 Published 2021-02-25 Fixed in publication, 4.5.1 +2
Priority MEDIUM 48

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET C…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.14833 Published 2018-10-10 Partial fix · 4.3.4 CWE-200
Priority MEDIUM 42

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06462 Published 2020-05-21 Fixed in publication, 2.1.18 +1
Priority LOW 39

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03687 Published 2018-01-10 Fixed in 5.2.4, 5.3.5 +6 CWE-295
TI-2018-06098 CVE-2018-8415 · GHSA-69m5-86x3-v3m5

Code injection in Microsoft Windows 7

Priority LOW 36

A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This affects Windows 7, PowerShell Core 6.1, Windows Server 2012 R…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01185 Published 2018-11-14 No fix listed CWE-94
Priority LOW 34

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.04555 Published 2019-03-06 Partial fix · 2.2.2, 2.1.8 +1 CWE-20
Priority LOW 26

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00748 Published 2018-07-11 Partial fix · 4.1.3, 4.3.3 +3 CWE-295
Priority LOW 21

A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vu…

CVSS 3.0MEDIUM 4.1 Local High privileges No interaction EPSS 0.011 Published 2019-07-19 Fixed in 6.2.2, 6.1.5
Open these records in search →