CVE-2017-8759
Microsoft .NET Framework Remote Code Execution Vulnerability
Published Sep 12, 2017 · updated Jun 16, 2026 · microsoft .net framework
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Sep 12, 2017 · Catalog
Detected
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 3, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
Required action
Apply updates per vendor instructions.
CISA due date May 3, 2022
Affected
- cpe microsoft/.net framework2.0
- cpe microsoft/.net framework3.5
- cpe microsoft/.net framework3.5.1
- cpe microsoft/.net framework4.5.2
- cpe microsoft/.net framework4.6
- cpe microsoft/.net framework4.6.1
- cpe microsoft/.net framework4.6.2
- cpe microsoft/.net framework4.7
- vendor Microsoft .NET Frameworkversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2017-8759
Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take control of an affected system.
cisa.gov - CVE.orgVulnerability recordCVE-2017-8759
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2017-8759
30-day exploitation probability 88.7%
first.org - Exploit DatabasePublic exploit reference42711
Public archive entry. The exploit body is not stored here.
exploit-db.com - NIST NVDVulnerability recordCVE-2017-8759
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
nvd.nist.gov