CVE-2017-8759
KEVHIGH 9.3EPSS 88.7%
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v2.0
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 88.70% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2021-11-03
- Published
- 2017-09-13
- Updated
- 2025-10-21
Proof-of-concept exploits (15)
- BasuCert/CVE-2017-87591★ · 2017-09-15
- ChaitanyaHaritash/CVE-2017-87590★ · 2018-12-11
- JonasUliana/CVE-2017-87595★ · 2017-09-17
- Voulnet/CVE-2017-8759-Exploit-sample255★ · 2020-01-23
- Winter3un/cve_2017_87590★ · 2017-10-29
- adeljck/CVE-2017-87590★ · 2019-06-25
- ashr/CVE-2017-8759-exploits2★ · 2017-09-19
- bhdresh/CVE-2017-8759312★ · 2018-09-10
- homjxi0e/CVE-2017-8759_-SOAP_WSDL0★ · 2017-09-21
- l0n3rs/CVE-2017-87590★ · 2017-09-24
- nccgroup/CVE-2017-875994★ · 2017-09-19
- smashinu/CVE-2017-8759Expoit0★ · 2019-05-30
- sythass/CVE-2017-87590★ · 2017-09-17
- vysecurity/CVE-2017-8759176★ · 2017-09-14
- zhengkook/CVE-2017-87590★ · 2020-01-02