CVE-2020-1066

🗓️ 21 May 2020 22:52:55Reported by microsoftType

An elevation of privilege vulnerability exists in .NET Framework allowing attackers to elevate their privilege level by activating COM object

Reporter	Title	Published	Views	Family All 20
Information Security Automation	Microsoft Patch Tuesday May 2020: comments from VM vendors, promising stuff for phishing, troubles with SharePoint and lulz with Visual Studio	13 May 202000:49	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft .NET Framework software platform, related to deficiencies in access control, allows attackers to exploit their privileges.	17 Jul 202000:00	–	bdu_fstec
Circl	CVE-2020-1066	17 Nov 202308:24	–	circl
CNVD	Microsoft .NET Framework Privilege Mobilization Vulnerability (CNVD-2020-62334)	13 May 202000:00	–	cnvd
CVE	CVE-2020-1066	21 May 202022:52	–	cve
Microsoft KB	Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB4556399)	12 May 202007:00	–	mskb
Microsoft KB	Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4556402)	12 May 202007:00	–	mskb
Microsoft KB	Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB4556403)	12 May 202007:00	–	mskb
Microsoft KB	Security Only Update for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4556406)	12 May 202007:00	–	mskb
Kaspersky	KLA11772 Multiple vulnerabilities in Microsoft Developer Tools	12 May 202000:00	–	kaspersky

[
  {
    "product": "Microsoft .NET Framework 3.0",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5.1",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 7 for 32-bit Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 7 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1066

21 May 2020 22:52Current

7.9High risk

Vulners AI Score7.9

EPSS0.02309