A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet3.1-debuginfoUpgrade dotnet-hostUpgrade dotnet-runtime-2.1Upgrade dotnet3.1-debugsourceUpgrade aspnetcore-runtime-3.1Upgrade dotnet-debuginfoUpgrade dotnet-apphost-pack-3.1-debuginfoUpgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-debugsourceUpgrade dotnet-runtime-3.1-debuginfoUpgrade dotnet-host-debuginfoUpgrade dotnet-sdk-3.1-debuginfoUpgrade dotnet-runtime-3.1Upgrade dotnet-apphost-pack-3.1Upgrade dotnet-host-fxr-2.1Upgrade dotnet-targeting-pack-3.1Upgrade dotnet-hostfxr-3.1Upgrade dotnet-sdk-2.1Upgrade aspnetcore-targeting-pack-3.1Upgrade dotnet-sdk-3.1Upgrade dotnet-hostfxr-3.1-debuginfoUpgrade dotnet-templates-3.1Upgrade netstandard-targeting-pack-2.1Upgrade dotnetUpgrade dotnet-sdk-2.1.5xx | Jul 16, 2020 | Jul 14, 2020 |
| Microsoft Sharepoint | — | Download and install Microsoft KB4484436Download and install Microsoft KB4484453 | May 15, 2023 | Jul 14, 2020 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.0 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.4 version stream, or upgrade to a newer supported version of Visual Studio 2019. | Jun 25, 2025 | Jul 14, 2020 |
| Msft | — | 2020-07 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4565489)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows 8.1 (KB4565581)2020-07 Security Only Update for .NET Framework 4.8 for Windows Server 2008 R2 for x64 (KB4565589)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows 8.1 and Server 2012 R2 for x64 (KB4565581)2020-07 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4565489)2020-07 Security Only Update for .NET Framework 3.5.1 for Windows Embedded Standard 7 for x64 (KB4565579)2020-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4565511)2020-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server, version 1903 for x64 (KB4578974)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows Server 2008 R2 for x64 (KB4565583)2020-07 Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 (KB4565586)2020-07 Security Only Update for .NET Framework 3.5.1 for Windows 7 (KB4565579)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows 7 (KB4565583)2020-07 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 (KB4565625)2020-07 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Server 2012 R2 for x64 (KB4565585)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows Server 2012 for x64 (KB4565582)2020-07 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard (KB4565584)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4484443)2020-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server, version 2004 for x64 (KB4578968)Apply update KB4578973 for Microsoft .NET Framework 3.5\4.82020-07 Security Only Update for .NET Framework 3.5 for Windows 8.1 and Server 2012 R2 for x64 (KB4565580)2020-07 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 for x64 (KB4565586)2020-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server, version 2004 for x64 (KB4565627)2020-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server, version 20H2 for x64 (KB4578968)Apply update KB4580327 for Microsoft .NET Framework 3.5\4.6\4.6.1\4.6.22020-07 Security Only Update for .NET Framework 4.8 for Windows 7 for x64 (KB4565589)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows Embedded Standard 7 for x64 (KB4565583)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows Embedded Standard 7 (KB4565583)2020-07 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard for x64 (KB4565584)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows Server 2008 SP2 for x64 (KB4565583)2020-07 Security Only Update for .NET Framework 2.0, 3.0 for Windows Server 2008 SP2 for x64 (KB4565578)2020-07 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB4565513)2020-07 Security Only Update for .NET Framework 3.5.1 for Windows Server 2008 R2 for x64 (KB4565579)2020-07 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4565511)2020-07 Security Only Update for .NET Framework 3.5.1 for Windows Embedded Standard 7 (KB4565579)2020-07 Security Only Update for .NET Framework 4.8 for Windows Embedded Standard 7 (KB4565589)Apply update KB4578974 for Microsoft .NET Framework 3.5\4.82020-07 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 (KB4565585)2020-07 Security Only Update for .NET Framework 4.8 for Windows 7 (KB4565589)2020-07 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7 for x64 (KB4565586)Apply update KB4578971 for Microsoft .NET Framework 4.8Apply update KB4580328 for Microsoft .NET Framework 3.5\4.7.1\4.7.22020-07 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4565508)2020-07 Security Only Update for .NET Framework 4.8 for Windows Embedded Standard 7 for x64 (KB4565589)2020-07 Security Only Update for .NET Framework 4.8 for Windows Embedded 8 Standard for x64 (KB4565587)2020-07 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 (KB4565586)2020-07 Security Only Update for .NET Framework 2.0, 3.0 for Windows Server 2008 SP2 (KB4565578)2020-07 Security Only Update for .NET Framework 3.5 for Windows Embedded 8 Standard for x64 (KB4565577)Apply update KB4578966 for Microsoft .NET Framework 3.5\4.7.22020-07 Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2008 R2 for x64 (KB4565636)Apply update KB4580330 for Microsoft .NET Framework 3.5\4.7.22020-07 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4565508)2020-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server, version 1909 for x64 (KB4565633)2020-07 Security Only Update for .NET Framework 4.8 for Windows 8.1 and Server 2012 R2 for x64 (KB4565588)2020-07 Security Only Update for .NET Framework 4.8 for Windows Server 2012 for x64 (KB4565587)2020-07 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7 (KB4565586)2020-07 Security Only Update for .NET Framework 3.5 for Windows Server 2012 for x64 (KB4565577)2020-10 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4580346)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows Embedded 8 Standard (KB4565582)2020-07 Security Only Update for .NET Framework 3.5 for Windows 8.1 (KB4565580)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows Server 2008 SP2 (KB4565583)2020-07 Security Only Update for .NET Framework 4.8 for Windows Embedded 8 Standard (KB4565587)Security Update for 2010 Microsoft Business Productivity Servers (KB4484460)Apply update KB4578968 for Microsoft .NET Framework 3.5\4.82020-07 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4565511)2020-07 Security Only Update for .NET Framework 4.5.2 for Windows Embedded 8 Standard for x64 (KB4565582)2020-07 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 for x64 (KB4565584)2020-07 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4565513)Apply update KB4578972 for Microsoft .NET Framework 4.82020-07 Security Only Update for .NET Framework 4.5.2 for Windows 7 for x64 (KB4565583)Apply update KB4578969 for Microsoft .NET Framework 4.82020-07 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2008 R2 for x64 (KB4565586)2020-07 Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 for x64 (KB4565586)2020-07 Security Only Update for .NET Framework 3.5 for Windows Embedded 8 Standard (KB4565577)Apply update KB4580346 for Microsoft .NET Framework 3.5\4.6.2\4.7\4.7.1\4.7.22020-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server, version 1909 for x64 (KB4578974)2020-07 Security Only Update for .NET Framework 4.8 for Windows 8.1 (KB4565588)2020-07 Security Only Update for .NET Framework 3.5.1 for Windows 7 for x64 (KB4565579) | Jul 14, 2020 | Jul 14, 2020 |
| Oracle_linux | — | Upgrade dotnet-hostfxr-3.1Upgrade aspnetcore-runtime-3.1Upgrade dotnet-targeting-pack-3.1Upgrade dotnet-runtime-3.1Upgrade dotnet-templates-3.1Upgrade dotnet-sdk-3.1Upgrade dotnet-apphost-pack-3.1Upgrade dotnet-runtime-2.1Upgrade dotnet-sdk-2.1.5xxUpgrade dotnetUpgrade aspnetcore-targeting-pack-3.1Upgrade netstandard-targeting-pack-2.1Upgrade dotnet-sdk-2.1Upgrade dotnet-hostUpgrade dotnet-host-fxr-2.1 | Jul 17, 2020 | Jul 14, 2020 |
| Redhat_linux | — | Upgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet-debugsourceUpgrade dotnet-templates-3.1Upgrade dotnet-sdk-3.1-debuginfoUpgrade dotnet3.1-debugsourceUpgrade dotnet-targeting-pack-3.1Upgrade dotnet-apphost-pack-3.1-debuginfoUpgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-sdk-3.1Upgrade dotnet-apphost-pack-3.1Upgrade dotnet-hostfxr-3.1Upgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-debuginfoUpgrade dotnet-hostUpgrade dotnet3.1-debuginfoUpgrade dotnet-runtime-3.1-debuginfoUpgrade netstandard-targeting-pack-2.1Upgrade dotnet-host-fxr-2.1Upgrade dotnet-runtime-2.1Upgrade dotnet-host-debuginfoUpgrade dotnet-sdk-2.1.5xxUpgrade dotnet-sdk-2.1Upgrade dotnetUpgrade aspnetcore-targeting-pack-3.1Upgrade dotnet-runtime-3.1Upgrade dotnet-hostfxr-3.1-debuginfoUpgrade aspnetcore-runtime-3.1 | Jul 16, 2020 | Jul 14, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jul 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub