CVE-2018-8202
First published: Wed Jul 11 2018(Updated: )
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET Framework Elevation of Privilege Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft .NET Framework 4 | =2.0-sp2 | |
| Microsoft .NET Framework 4 | =3.0-sp2 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft .NET Framework 4 | =3.5 | |
| Windows 10 | ||
| Windows 10 | =1607 | |
| Windows 10 | =1703 | |
| Windows 10 | =1709 | |
| Windows 10 | =1803 | |
| Microsoft Windows | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft .NET Framework 4 | =3.5.1 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft .NET Framework 4 | =4.5.2 | |
| Microsoft Windows RT | ||
| Microsoft Windows Server | =sp2 | |
| Microsoft .NET Framework 4 | =4.6 | |
| Microsoft .NET Framework 4 | =4.6.2 | |
| Microsoft .NET Framework 4 | =4.7 | |
| Microsoft .NET Framework 4 | =4.7.1 | |
| Microsoft .NET Framework 4 | =4.7.2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft .NET Framework 4 | =4.6.1 | |
| Microsoft Windows Server | =1709 | |
| Microsoft Windows Server | =1803 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-8202?
CVE-2018-8202 is classified as a critical elevation of privilege vulnerability in the .NET Framework.
How do I fix CVE-2018-8202?
To mitigate CVE-2018-8202, ensure you apply the latest security updates provided by Microsoft for the affected .NET Framework versions.
Who is affected by CVE-2018-8202?
CVE-2018-8202 affects users running Microsoft .NET Framework versions 2.0, 3.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2.
What types of attacks can exploit CVE-2018-8202?
An attacker could exploit CVE-2018-8202 to gain elevated privileges on a vulnerable system.
Is CVE-2018-8202 present in Windows Server environments?
Yes, CVE-2018-8202 can also affect various Windows Server environments that utilize the vulnerable .NET Framework versions.
- agent/type
- agent/severity
- agent/references
- agent/remedy
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft .net framework 4
- version/microsoft .net framework 4/2.0-sp2
- version/microsoft .net framework 4/3.0-sp2
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/microsoft .net framework 4/3.5
- canonical/windows 10
- version/windows 10/1607
- version/windows 10/1703
- version/windows 10/1709
- version/windows 10/1803
- canonical/microsoft windows
- version/microsoft windows server/r2
- canonical/microsoft windows server 2016
- version/microsoft .net framework 4/3.5.1
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- version/microsoft windows server/r2-sp1
- version/microsoft .net framework 4/4.5.2
- canonical/microsoft windows rt
- version/microsoft .net framework 4/4.6
- version/microsoft .net framework 4/4.6.2
- version/microsoft .net framework 4/4.7
- version/microsoft .net framework 4/4.7.1
- version/microsoft .net framework 4/4.7.2
- version/microsoft .net framework 4/4.6.1
- version/microsoft windows server/1709
- version/microsoft windows server/1803