Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious

Summary

Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability."

Timeline

1. Apr 12, 2017, 2:00 PM UTCCVE published
2. Apr 20, 2017Public exploit on Exploit-DB

   EDB-41903

3. Aug 5, 2024, 12:55 PM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• Microsoft Corporation .NET Framework

  Version range not reported

References 5