CVE-2018-8284
HIGH 8.1EPSS 46.0%
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.
- Affected
- Microsoft · Microsoft .NET Framework
- CVSS v3.0 NVD
- 8.1 HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 45.99% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2018-07-11
- Updated
- 2024-08-05
Proof-of-concept exploits (1)
- quantiti/CVE-2018-8284-Sharepoint-RCE3★ · 2019-04-11
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8284
- http://www.securityfocus.com/bid/104667
- http://www.securitytracker.com/id/1041257