CVE-2020-1147

Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

Severity Score

7.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

Yes

*KEV

Decision

*SSVC

Descriptions

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

Se presenta una vulnerabilidad de ejecución de código remota en .NET Framework, Microsoft SharePoint y Visual Studio cuando el software presenta un fallo al comprobar el marcado de origen de una entrada de archivo XML, también se conoce como ".NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability"

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core application.

Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for deserialization of the XML content.

*Credits: N/A

CVSS Scores

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-11-04 CVE Reserved
2020-07-14 CVE Published
2020-08-17 First Exploit
2021-11-03 Exploited in Wild
2022-05-03 KEV Due Date
2024-08-04 CVE Updated
2024-11-07 EPSS Updated

CWE

CWE-502: Deserialization of Untrusted Data

CAPEC

References (10)

URL	Tag	Source
https://srcincite.io/blog/2020/07/20/sharepoint-and-pwn-remote-code-execution-against-sharepoint-server-abusing-dataset.html

URL	Date	SRC
https://www.exploit-db.com/exploits/48747	2020-08-17
https://www.exploit-db.com/exploits/50151	2021-07-23
http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html	2024-08-04
http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html	2024-08-04
http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html	2024-08-04
https://www.exploitalert.com/view-details.html?id=35992	2024-08-04

URL	Date	SRC
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147	2022-07-12

URL	Date	SRC
https://access.redhat.com/security/cve/CVE-2020-1147	2020-07-17
https://bugzilla.redhat.com/show_bug.cgi?id=1856929	2020-07-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	2.0 Search vendor "Microsoft" for product ".net Framework" and version "2.0"	sp2	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	-	sp2	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.0 Search vendor "Microsoft" for product ".net Framework" and version "3.0"	sp2	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	-	sp2	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	r2 Search vendor "Microsoft" for product "Windows Server 2012" and version "r2"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1607 Search vendor "Microsoft" for product "Windows 10" and version "1607"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.2 Search vendor "Microsoft" for product ".net Framework" and version "4.6.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1607 Search vendor "Microsoft" for product "Windows 10" and version "1607"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.2 Search vendor "Microsoft" for product ".net Framework" and version "4.6.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7 Search vendor "Microsoft" for product ".net Framework" and version "4.7"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1607 Search vendor "Microsoft" for product "Windows 10" and version "1607"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7 Search vendor "Microsoft" for product ".net Framework" and version "4.7"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.1 Search vendor "Microsoft" for product ".net Framework" and version "4.7.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1607 Search vendor "Microsoft" for product "Windows 10" and version "1607"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.1 Search vendor "Microsoft" for product ".net Framework" and version "4.7.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1607 Search vendor "Microsoft" for product "Windows 10" and version "1607"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6 Search vendor "Microsoft" for product ".net Framework" and version "4.6"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.1 Search vendor "Microsoft" for product ".net Framework" and version "4.6.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.2 Search vendor "Microsoft" for product ".net Framework" and version "4.6.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6 Search vendor "Microsoft" for product ".net Framework" and version "4.6"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.1 Search vendor "Microsoft" for product ".net Framework" and version "4.6.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.2 Search vendor "Microsoft" for product ".net Framework" and version "4.6.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1709 Search vendor "Microsoft" for product "Windows 10" and version "1709"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.1 Search vendor "Microsoft" for product ".net Framework" and version "4.7.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1709 Search vendor "Microsoft" for product "Windows 10" and version "1709"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1709 Search vendor "Microsoft" for product "Windows 10" and version "1709"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1803 Search vendor "Microsoft" for product "Windows 10" and version "1803"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1809 Search vendor "Microsoft" for product "Windows 10" and version "1809"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	1803 Search vendor "Microsoft" for product "Windows Server 2016" and version "1803"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2019 Search vendor "Microsoft" for product "Windows Server 2019"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1803 Search vendor "Microsoft" for product "Windows 10" and version "1803"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1809 Search vendor "Microsoft" for product "Windows 10" and version "1809"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	1803 Search vendor "Microsoft" for product "Windows Server 2016" and version "1803"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2019 Search vendor "Microsoft" for product "Windows Server 2019"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1809 Search vendor "Microsoft" for product "Windows 10" and version "1809"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1903 Search vendor "Microsoft" for product "Windows 10" and version "1903"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1909 Search vendor "Microsoft" for product "Windows 10" and version "1909"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	2004 Search vendor "Microsoft" for product "Windows 10" and version "2004"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	1903 Search vendor "Microsoft" for product "Windows Server 2016" and version "1903"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	1909 Search vendor "Microsoft" for product "Windows Server 2016" and version "1909"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	2004 Search vendor "Microsoft" for product "Windows Server 2016" and version "2004"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5 Search vendor "Microsoft" for product ".net Framework" and version "3.5"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2019 Search vendor "Microsoft" for product "Windows Server 2019"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1809 Search vendor "Microsoft" for product "Windows 10" and version "1809"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1903 Search vendor "Microsoft" for product "Windows 10" and version "1903"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1909 Search vendor "Microsoft" for product "Windows 10" and version "1909"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	2004 Search vendor "Microsoft" for product "Windows 10" and version "2004"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	1903 Search vendor "Microsoft" for product "Windows Server 2016" and version "1903"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	1909 Search vendor "Microsoft" for product "Windows Server 2016" and version "1909"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	2004 Search vendor "Microsoft" for product "Windows Server 2016" and version "2004"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2019 Search vendor "Microsoft" for product "Windows Server 2019"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5.1 Search vendor "Microsoft" for product ".net Framework" and version "3.5.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 7 Search vendor "Microsoft" for product "Windows 7"	-	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	3.5.1 Search vendor "Microsoft" for product ".net Framework" and version "3.5.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	r2 Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"	sp1, x64	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.5.2 Search vendor "Microsoft" for product ".net Framework" and version "4.5.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 7 Search vendor "Microsoft" for product "Windows 7"	-	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.5.2 Search vendor "Microsoft" for product ".net Framework" and version "4.5.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.5.2 Search vendor "Microsoft" for product ".net Framework" and version "4.5.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Rt 8.1 Search vendor "Microsoft" for product "Windows Rt 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.5.2 Search vendor "Microsoft" for product ".net Framework" and version "4.5.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	-	sp2	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.5.2 Search vendor "Microsoft" for product ".net Framework" and version "4.5.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	r2 Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"	sp1, x64	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.5.2 Search vendor "Microsoft" for product ".net Framework" and version "4.5.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.5.2 Search vendor "Microsoft" for product ".net Framework" and version "4.5.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	r2 Search vendor "Microsoft" for product "Windows Server 2012" and version "r2"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6 Search vendor "Microsoft" for product ".net Framework" and version "4.6"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	-	sp2	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6 Search vendor "Microsoft" for product ".net Framework" and version "4.6"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 7 Search vendor "Microsoft" for product "Windows 7"	-	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6 Search vendor "Microsoft" for product ".net Framework" and version "4.6"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6 Search vendor "Microsoft" for product ".net Framework" and version "4.6"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	r2 Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6 Search vendor "Microsoft" for product ".net Framework" and version "4.6"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6 Search vendor "Microsoft" for product ".net Framework" and version "4.6"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	r2 Search vendor "Microsoft" for product "Windows Server 2012" and version "r2"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.1 Search vendor "Microsoft" for product ".net Framework" and version "4.6.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 7 Search vendor "Microsoft" for product "Windows 7"	-	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.1 Search vendor "Microsoft" for product ".net Framework" and version "4.6.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.1 Search vendor "Microsoft" for product ".net Framework" and version "4.6.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	r2 Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.1 Search vendor "Microsoft" for product ".net Framework" and version "4.6.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.1 Search vendor "Microsoft" for product ".net Framework" and version "4.6.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	r2 Search vendor "Microsoft" for product "Windows Server 2012" and version "r2"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.2 Search vendor "Microsoft" for product ".net Framework" and version "4.6.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 7 Search vendor "Microsoft" for product "Windows 7"	-	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.2 Search vendor "Microsoft" for product ".net Framework" and version "4.6.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.2 Search vendor "Microsoft" for product ".net Framework" and version "4.6.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	r2 Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.2 Search vendor "Microsoft" for product ".net Framework" and version "4.6.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.6.2 Search vendor "Microsoft" for product ".net Framework" and version "4.6.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	r2 Search vendor "Microsoft" for product "Windows Server 2012" and version "r2"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7 Search vendor "Microsoft" for product ".net Framework" and version "4.7"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 7 Search vendor "Microsoft" for product "Windows 7"	-	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7 Search vendor "Microsoft" for product ".net Framework" and version "4.7"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7 Search vendor "Microsoft" for product ".net Framework" and version "4.7"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	r2 Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7 Search vendor "Microsoft" for product ".net Framework" and version "4.7"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7 Search vendor "Microsoft" for product ".net Framework" and version "4.7"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	r2 Search vendor "Microsoft" for product "Windows Server 2012" and version "r2"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.1 Search vendor "Microsoft" for product ".net Framework" and version "4.7.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 7 Search vendor "Microsoft" for product "Windows 7"	-	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.1 Search vendor "Microsoft" for product ".net Framework" and version "4.7.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.1 Search vendor "Microsoft" for product ".net Framework" and version "4.7.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	r2 Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.1 Search vendor "Microsoft" for product ".net Framework" and version "4.7.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.1 Search vendor "Microsoft" for product ".net Framework" and version "4.7.1"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	r2 Search vendor "Microsoft" for product "Windows Server 2012" and version "r2"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 7 Search vendor "Microsoft" for product "Windows 7"	-	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	r2 Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.7.2 Search vendor "Microsoft" for product ".net Framework" and version "4.7.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	r2 Search vendor "Microsoft" for product "Windows Server 2012" and version "r2"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1607 Search vendor "Microsoft" for product "Windows 10" and version "1607"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1709 Search vendor "Microsoft" for product "Windows 10" and version "1709"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 10 Search vendor "Microsoft" for product "Windows 10"	1803 Search vendor "Microsoft" for product "Windows 10" and version "1803"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 7 Search vendor "Microsoft" for product "Windows 7"	-	sp1	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Rt 8.1 Search vendor "Microsoft" for product "Windows Rt 8.1"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2008 Search vendor "Microsoft" for product "Windows Server 2008"	r2 Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"	sp1, x64	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012"	r2 Search vendor "Microsoft" for product "Windows Server 2012" and version "r2"	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	-	-	Safe
Microsoft Search vendor "Microsoft"	.net Framework Search vendor "Microsoft" for product ".net Framework"	4.8 Search vendor "Microsoft" for product ".net Framework" and version "4.8"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016"	1803 Search vendor "Microsoft" for product "Windows Server 2016" and version "1803"	-	Safe
Microsoft Search vendor "Microsoft"		.net Core Search vendor "Microsoft" for product ".net Core"				2.1 Search vendor "Microsoft" for product ".net Core" and version "2.1"		-		Affected
Microsoft Search vendor "Microsoft"		.net Core Search vendor "Microsoft" for product ".net Core"				3.1 Search vendor "Microsoft" for product ".net Core" and version "3.1"		-		Affected
Microsoft Search vendor "Microsoft"		Sharepoint Enterprise Server Search vendor "Microsoft" for product "Sharepoint Enterprise Server"				2013 Search vendor "Microsoft" for product "Sharepoint Enterprise Server" and version "2013"		sp1		Affected
Microsoft Search vendor "Microsoft"		Sharepoint Enterprise Server Search vendor "Microsoft" for product "Sharepoint Enterprise Server"				2016 Search vendor "Microsoft" for product "Sharepoint Enterprise Server" and version "2016"		-		Affected
Microsoft Search vendor "Microsoft"		Sharepoint Server Search vendor "Microsoft" for product "Sharepoint Server"				2010 Search vendor "Microsoft" for product "Sharepoint Server" and version "2010"		sp2		Affected
Microsoft Search vendor "Microsoft"		Sharepoint Server Search vendor "Microsoft" for product "Sharepoint Server"				2019 Search vendor "Microsoft" for product "Sharepoint Server" and version "2019"		-		Affected
Microsoft Search vendor "Microsoft"		Visual Studio 2017 Search vendor "Microsoft" for product "Visual Studio 2017"				>= 15.0 <= 15.9 Search vendor "Microsoft" for product "Visual Studio 2017" and version " >= 15.0 <= 15.9"		-		Affected
Microsoft Search vendor "Microsoft"		Visual Studio 2019 Search vendor "Microsoft" for product "Visual Studio 2019"				>= 16.0 <= 16.6 Search vendor "Microsoft" for product "Visual Studio 2019" and version " >= 16.0 <= 16.6"		-		Affected