CVE-2020-1066

🗓️ 21 May 2020 22:52:55Reported by microsoftType

An elevation of privilege vulnerability in .NET Framework

Reporter	Title	Published	Views	Family All 19
Information Security Automation	Microsoft Patch Tuesday May 2020: comments from VM vendors, promising stuff for phishing, troubles with SharePoint and lulz with Visual Studio	13 May 202000:49	–	avleonov
Circl	CVE-2020-1066	17 Nov 202308:24	–	circl
CNVD	Microsoft .NET Framework Privilege Mobilization Vulnerability (CNVD-2020-62334)	13 May 202000:00	–	cnvd
Cvelist	CVE-2020-1066	21 May 202022:52	–	cvelist
Microsoft KB	Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB4556399)	12 May 202007:00	–	mskb
Microsoft KB	Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4556402)	12 May 202007:00	–	mskb
Microsoft KB	Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB4556403)	12 May 202007:00	–	mskb
Microsoft KB	Security Only Update for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4556406)	12 May 202007:00	–	mskb
Kaspersky	KLA11772 Multiple vulnerabilities in Microsoft Developer Tools	12 May 202000:00	–	kaspersky
Microsoft CVE	.NET Framework Elevation of Privilege Vulnerability	12 May 202007:00	–	mscve

NVD

Node

microsoft .net_frameworkMatch3.0sp2

AND

microsoft windows_server_2008Match-sp2

Node

microsoft .net_frameworkMatch3.5.1

AND

microsoft windows_7Match-sp1

microsoft windows_server_2008Matchr2sp1x64

[
  {
    "product": "Microsoft .NET Framework 3.0",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5.1",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 7 for 32-bit Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 7 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1066

21 Nov 2024 05:09Current

7.5High risk

Vulners AI Score7.5

CVSS 24.6

CVSS 3.17.8

EPSS0.33109

In Wild