CVE-2020-16937

MEDIUM

.NET Framework - Information Disclosure via Memory Handling

Title source: llm
STIX 2.1

Description

<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system's memory.</p> <p>To exploit the vulnerability, an authenticated attacker would need to run a specially crafted application.</p> <p>The update addresses the vulnerability by correcting how the .NET Framework handles objects in memory.</p>

References (1)

Core 1
Core References

Scores

CVSS v3 4.7
EPSS 0.0329
EPSS Percentile 87.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (11)
microsoft/.net_framework 2.0 sp2
microsoft/.net_framework 3.5
microsoft/.net_framework 4.6.2
microsoft/.net_framework 4.7
microsoft/.net_framework 4.7.1
microsoft/.net_framework 4.7.2
microsoft/.net_framework 4.6
microsoft/.net_framework 4.6.1
microsoft/.net_framework 4.8
microsoft/.net_framework 3.5.1
... and 1 more
Published Oct 16, 2020
Tracked Since Feb 18, 2026