CVE-2020-16937: .NET Framework Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system's memory.</p> <p>To exploit the vulnerability, an authenticated attacker would need to run a specially crafted application.</p> <p>The update addresses the vulnerability by correcting how the .NET Framework handles objects in memory.</p>
Other sources
An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory, aka '.NET Framework Information Disclosure Vulnerability'.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-16937?
CVE-2020-16937 is an information disclosure vulnerability in the .NET Framework.
What is the severity of CVE-2020-16937?
The severity of CVE-2020-16937 is medium, with a CVSS score of 5.5.
Which software is affected by CVE-2020-16937?
The affected software includes Microsoft .NET Framework versions 2.0 SP2, 3.5, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, and 4.8.
How does CVE-2020-16937 work?
CVE-2020-16937 allows for information disclosure in the .NET Framework due to improper handling of objects in memory.
Where can I find more information about CVE-2020-16937?
More information about CVE-2020-16937 can be found on the Microsoft Security Guidance Advisory page: [link](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16937)