A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-aspnetcore-runtime-3-1centos-upgrade-aspnetcore-targeting-pack-3-1centos-upgrade-dotnetcentos-upgrade-dotnet-apphost-pack-3-1centos-upgrade-dotnet-apphost-pack-3-1-debuginfocentos-upgrade-dotnet-debuginfocentos-upgrade-dotnet-debugsourcecentos-upgrade-dotnet-hostcentos-upgrade-dotnet-host-debuginfocentos-upgrade-dotnet-host-fxr-2-1centos-upgrade-dotnet-host-fxr-2-1-debuginfocentos-upgrade-dotnet-hostfxr-3-1centos-upgrade-dotnet-hostfxr-3-1-debuginfocentos-upgrade-dotnet-runtime-2-1centos-upgrade-dotnet-runtime-2-1-debuginfocentos-upgrade-dotnet-runtime-3-1centos-upgrade-dotnet-runtime-3-1-debuginfocentos-upgrade-dotnet-sdk-2-1centos-upgrade-dotnet-sdk-2-1-5xxcentos-upgrade-dotnet-sdk-2-1-5xx-debuginfocentos-upgrade-dotnet-sdk-3-1centos-upgrade-dotnet-sdk-3-1-debuginfocentos-upgrade-dotnet-targeting-pack-3-1centos-upgrade-dotnet-templates-3-1centos-upgrade-dotnet3-1-debuginfocentos-upgrade-dotnet3-1-debugsourcecentos-upgrade-netstandard-targeting-pack-2-1 | Jul 16, 2020 | Jul 14, 2020 |
| Microsoft Sharepoint | microsoft-sharepoint-sharepoint_2016-kb4484436microsoft-sharepoint-sharepoint_2019-kb4484453 | May 15, 2023 | Jul 14, 2020 | |
| Microsoft Visual_studio | microsoft-visual_studio_2017-upgrade-latest-ltsc_15_9microsoft-visual_studio_2019-upgrade-latest-ltsc_16_4microsoft-visual_studio_2019-upgrade-latest-ltsc_16_0 | Jun 25, 2025 | Jul 14, 2020 | |
| Msft | — | msft-kb4484443-8ef57bdc-d0f6-4ebb-b9bf-713f4e35272cmsft-kb4484460-392fa990-52ef-434a-8c18-b66d06682d12msft-kb4565489-1d68cd90-971e-43f4-ab9e-626ae9429fc9msft-kb4565489-72f35143-59a4-43d2-a23b-ec3cdbbf729dmsft-kb4565508-785b1349-3f0c-4bd5-9026-82852f0f9be3msft-kb4565508-cbdd311f-9094-4a87-a5ce-8c10c46070bemsft-kb4565511-51c72e01-8b82-457e-b308-29975f3bb759msft-kb4565511-72f5c720-ee6c-48ae-904b-ec5449b9a560microsoft-windows-windows_server_2016-1607-kb4565511msft-kb4565513-0bfed89d-18f0-4885-adc9-d6958a84f614msft-kb4565513-4e2556e1-8b2f-4d6c-ad22-67b11736daf5msft-kb4565577-11c4490d-554e-4c70-8b59-127201e99515msft-kb4565577-714212ec-c93b-47d7-8861-2d3cbb4bbefemsft-kb4565577-cbdd65df-8388-4ffb-8e68-46b4cb458d71msft-kb4565578-3680da14-864a-4510-962b-4c91444859d9msft-kb4565578-b0a8f586-80be-4af0-915a-b4643bdd50ccmsft-kb4565579-4d1d8fc9-3411-4e61-8c4b-cab0a267307emsft-kb4565579-504a4aa6-c62e-4559-a917-334941a2409fmsft-kb4565579-81cdbba8-fd4a-44e6-875f-7de55a612dbamsft-kb4565579-f3b7df99-bd77-4234-aa12-a13e8d921b42msft-kb4565579-f75e328d-9138-4b81-b659-2fb8248b0445msft-kb4565580-5a465d8d-c31a-49ad-bd59-eede5d69dc99msft-kb4565580-a26fb472-7d7c-4836-9174-935bac8e76b4msft-kb4565581-48f6d4e4-6987-4891-a484-b432a9afe900msft-kb4565581-95c4eef7-4e8e-415b-bacb-2a02581c5847msft-kb4565582-4cd77b0e-9518-476b-94d4-590417a9d5e6msft-kb4565582-d85f41ed-29ee-474b-9d3b-6c05b6bf92dfmsft-kb4565582-e1c59073-5149-407a-9fc4-571e7703667fmsft-kb4565583-15ae303f-249f-438c-bb1e-7d7aa4bba0a1msft-kb4565583-7ca1c228-9888-4540-b38e-e940866c72a8msft-kb4565583-7f867844-4e5d-4ba0-a2ca-e1028dbb3388msft-kb4565583-da27cc7b-1bb8-40e2-a9a4-6e69f98b4c7cmsft-kb4565583-dab3e32b-d66c-4a38-91cd-4434d1e81076msft-kb4565583-f042da35-1876-44e8-be89-02ba5f8b4ff0msft-kb4565583-f92251f4-eee9-4432-90f5-22442cb60f33msft-kb4565584-0dface38-47f6-4c9e-b6e7-41767071c86amsft-kb4565584-aaf94219-d40c-4006-a111-e0c00c8e82fdmsft-kb4565584-fb32b78d-faa2-45be-a2be-aa6969532aaamsft-kb4565585-353b68a2-58a7-44bd-8b23-c3efd096baf0msft-kb4565585-c7a4e4b2-f498-44ce-91ef-4dac99100c20msft-kb4565586-4353a596-b0c6-4c06-99c5-5d9c10b11129msft-kb4565586-44a7f221-db76-43e5-979e-331af6b2121bmsft-kb4565586-4e14b655-621f-476a-abcd-8f28e45119b0msft-kb4565586-93c52a9d-f519-4614-970d-3839f7a3cf0dmsft-kb4565586-a120d614-c43c-4c7a-81e0-89c43a551c20msft-kb4565586-a396b6e9-254f-425b-9f2a-3985fb560327msft-kb4565586-f976ec63-85b6-48a6-85f2-f3e320fdfd43msft-kb4565587-25a801df-0bb1-4c7d-864d-ab183adce534msft-kb4565587-46647ccc-6ac9-4af6-b122-f59b19426542msft-kb4565587-d09a9c18-0326-46f2-b247-b4d4b39c623emsft-kb4565588-4cf7140f-bb82-4f54-8024-fef8deab7679msft-kb4565588-8a6b71b0-ae92-4c12-bf1f-b68f887063c2msft-kb4565589-1bc4a4cc-d5a5-4900-9c7e-6f4f8ec438bdmsft-kb4565589-3b0c9729-1a3d-4ec8-aa3d-d4a283550c33msft-kb4565589-b3da0b83-4415-41c0-ba56-38bed425a42amsft-kb4565589-e8001421-e97d-4683-b7b5-e3bc42a7661dmsft-kb4565589-fd7202b4-f1ff-49f8-95cb-4f2a03f43806msft-kb4565625-48c6d429-3105-472f-9b09-ec58999eb3b0msft-kb4565627-37b2c49a-1dff-47a1-b4dd-11c72f7e96c4msft-kb4565633-faba8bb5-d7aa-40b9-99c0-f9371b994bf2msft-kb4565636-8aa5c03a-ba9c-4048-b228-c32ae58800bamsft-kb4578968-02c86d34-9139-4ad5-b92f-2a2fd185c806msft-kb4578968-4b58f37d-ee8a-4fb2-92bf-c173d3e27cf9msft-kb4578974-6df005ac-0716-4cf8-8581-1a86e0961b49msft-kb4578974-cb7db64e-7788-4ed2-990e-4083fe36963bmicrosoft-windows-windows_server_2016-1607-kb4580346microsoft-dot_net_framework-windows_10-1803-kb4578972microsoft-dot_net_framework-windows_10-1709-kb4578971microsoft-dot_net_framework-windows_10-1607-kb4578969microsoft-dot_net_framework-windows_server_2016-1607-kb4578969microsoft-dot_net_framework-windows_10-1809-kb4578973microsoft-dot_net_framework-windows_server_2019-1809-kb4578973microsoft-dot_net_framework-windows_10-1909-kb4578974microsoft-dot_net_framework-windows_10-1903-kb4578974microsoft-dot_net_framework-windows_10-1803-kb4580330microsoft-dot_net_framework-windows_10-1809-kb4578966microsoft-dot_net_framework-windows_server_2019-1809-kb4578966microsoft-dot_net_framework-windows_10-1607-kb4580346microsoft-dot_net_framework-windows_server_2016-1607-kb4580346microsoft-dot_net_framework-windows_10-1709-kb4580328microsoft-dot_net_framework-windows_10-1507-kb4580327microsoft-dot_net_framework-windows_10-2004-kb4578968 | Jul 14, 2020 | Jul 14, 2020 |
| Oracle_linux | — | oracle-linux-upgrade-aspnetcore-runtime-3-1oracle-linux-upgrade-aspnetcore-targeting-pack-3-1oracle-linux-upgrade-dotnetoracle-linux-upgrade-dotnet-apphost-pack-3-1oracle-linux-upgrade-dotnet-hostoracle-linux-upgrade-dotnet-host-fxr-2-1oracle-linux-upgrade-dotnet-hostfxr-3-1oracle-linux-upgrade-dotnet-runtime-2-1oracle-linux-upgrade-dotnet-runtime-3-1oracle-linux-upgrade-dotnet-sdk-2-1oracle-linux-upgrade-dotnet-sdk-2-1-5xxoracle-linux-upgrade-dotnet-sdk-3-1oracle-linux-upgrade-dotnet-targeting-pack-3-1oracle-linux-upgrade-dotnet-templates-3-1oracle-linux-upgrade-netstandard-targeting-pack-2-1 | Jul 17, 2020 | Jul 14, 2020 |
| Redhat_linux | redhat-upgrade-aspnetcore-runtime-3-1redhat-upgrade-aspnetcore-targeting-pack-3-1redhat-upgrade-dotnetredhat-upgrade-dotnet-apphost-pack-3-1redhat-upgrade-dotnet-apphost-pack-3-1-debuginforedhat-upgrade-dotnet-debuginforedhat-upgrade-dotnet-debugsourceredhat-upgrade-dotnet-hostredhat-upgrade-dotnet-host-debuginforedhat-upgrade-dotnet-host-fxr-2-1redhat-upgrade-dotnet-host-fxr-2-1-debuginforedhat-upgrade-dotnet-hostfxr-3-1redhat-upgrade-dotnet-hostfxr-3-1-debuginforedhat-upgrade-dotnet-runtime-2-1redhat-upgrade-dotnet-runtime-2-1-debuginforedhat-upgrade-dotnet-runtime-3-1redhat-upgrade-dotnet-runtime-3-1-debuginforedhat-upgrade-dotnet-sdk-2-1redhat-upgrade-dotnet-sdk-2-1-5xxredhat-upgrade-dotnet-sdk-2-1-5xx-debuginforedhat-upgrade-dotnet-sdk-3-1redhat-upgrade-dotnet-sdk-3-1-debuginforedhat-upgrade-dotnet-targeting-pack-3-1redhat-upgrade-dotnet-templates-3-1redhat-upgrade-dotnet3-1-debuginforedhat-upgrade-dotnet3-1-debugsourceredhat-upgrade-netstandard-targeting-pack-2-1 | Jul 16, 2020 | Jul 14, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Jul 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub