VULNERABILITY INTELLIGENCE
CVE-2020-1147
CVSS score7.8 HIGH
EPSS probability95.80%
CISA KEVKnown exploited vulnerability
Published2020-07-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
Vendor / product: Microsoft / .NET Framework, SharePoint, Visual Studio
Description
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
Primary references
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- secure@microsoft.com — Patch, Vendor Advisory
- secure@microsoft.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource