CVE-2020-0606

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0605.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Microsoft.NET Core3.0; 3.1
MicrosoftMicrosoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows RT 8.1; Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation)
MicrosoftMicrosoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systemsunspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systemsunspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systemsunspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systemsunspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systemsunspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systemsunspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows Server 2016unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows 8.1 for 32-bit systemsunspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows 8.1 for x64-based systemsunspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows RT 8.1unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows Server 2012unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows Server 2012 R2unspecified
MicrosoftMicrosoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)unspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8 on Windows Server 2019unspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)unspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation)1903
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019unspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)unspecified
MicrosoftMicrosoft .NET Framework 4.6Windows Server 2008 for 32-bit Systems Service Pack 2; Windows Server 2008 for x64-based Systems Service Pack 2
MicrosoftMicrosoft .NET Framework 3.0Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2; Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2; Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
MicrosoftMicrosoft .NET Framework 3.5Windows 10 Version 1607 for 32-bit Systems; Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation)
MicrosoftMicrosoft .NET Framework 3.5.1Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
MicrosoftMicrosoft .NET Framework 4.5.2Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows RT 8.1; Windows Server 2008 for 32-bit Systems Service Pack 2; Windows Server 2008 for x64-based Systems Service Pack 2; Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation)
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1909 (Server Core installation)unspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.2 on Windows 10 for x64-based Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.2 on Windows Server, version 1803 (Server Core Installation)unspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016unspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systemsunspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)unspecified
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.2 on Windows 10 for 32-bit Systemsunspecified

References

Timeline

Published
Jan 14, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-06075.5An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft GraphiCVE-2020-06085.5An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisCVE-2020-06099.8A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to theCVE-2020-06109.8A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to theCVE-2020-06117.5A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote DeCVE-2020-06127.5A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system usingCVE-2020-06137.8An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndCVE-2020-06147.8An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndCVE-2020-06155.5An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects CVE-2020-06165.5A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'CVE-2020-06176.0A denial of service vulnerability exists when Microsoft Hyper-V Virtual PCI on a host server fails to properly validate input from a privileCVE-2020-06188.8A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Micr
CVE-2020-0606: High severity, CVSS 8.8 | Vulnix