Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an malicious user to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
microsoft .net framework 4.6.2 |
||
microsoft .net framework 4.7 |
||
microsoft .net framework 2.0 |
||
microsoft .net framework 3.5 |
||
microsoft .net framework 4.6 |
||
microsoft .net framework 4.6.1 |
||
microsoft .net framework 3.5.1 |
||
microsoft .net framework 4.5.2 |
Get patching ASAP as exploits are being used in the wild – and fix Adobe stuff, too
Microsoft has today published patches for more than 50 security flaws in its products – including three serious holes being exploited right now in the wild. These updates should be applied as soon as possible. The May edition of Patch Tuesday addresses blunders in Internet Explorer, Edge, Windows, Office, and the .NET Framework. In total, 55 bugs have been squashed, including 17 that have been rated as critical security risks. Of the three bad bugs being actively exploited in the wild, two can...
Vulmon