{"id":"CVE-2017-8759","aliases":["EUVD-2017-17705","GHSA-rc4w-p9f6-7c7q"],"status":"published","title":"Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to...","description":"Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\"","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.88698,"percentile":0.99776,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-20","CWE-94"],"published":"2017-09-13T01:00:00Z","modified":"2026-06-17T01:26:54Z","kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2021-11-03"},{"source":"kev","since":"2021-11-03"}],"exploits":[{"source":"pocgithub","id":"BasuCert/CVE-2017-8759","title":"BasuCert/CVE-2017-8759","date":"2017-09-13","url":"https://github.com/BasuCert/CVE-2017-8759"},{"source":"exploitdb","id":"EDB-42711","title":"Microsoft Windows .NET Framework - Remote Code Execution","type":"remote","platform":"windows","date":"2017-09-13","url":"https://www.exploit-db.com/exploits/42711"},{"source":"pocgithub","id":"Voulnet/CVE-2017-8759-Exploit-sample","title":"Voulnet/CVE-2017-8759-Exploit-sample","date":"2017-09-13","url":"https://github.com/Voulnet/CVE-2017-8759-Exploit-sample"},{"source":"pocgithub","id":"nccgroup/CVE-2017-8759","title":"nccgroup/CVE-2017-8759","date":"2017-09-13","url":"https://github.com/nccgroup/CVE-2017-8759"},{"source":"pocgithub","id":"vysecurity/CVE-2017-8759","title":"vysecurity/CVE-2017-8759","date":"2017-09-13","url":"https://github.com/vysecurity/CVE-2017-8759"},{"source":"pocgithub","id":"bhdresh/CVE-2017-8759","title":"bhdresh/CVE-2017-8759","date":"2017-09-14","url":"https://github.com/bhdresh/CVE-2017-8759"},{"source":"pocgithub","id":"homjxi0e/CVE-2017-8759_-SOAP_WSDL","title":"homjxi0e/CVE-2017-8759_-SOAP_WSDL","date":"2017-09-14","url":"https://github.com/homjxi0e/CVE-2017-8759_-SOAP_WSDL"},{"source":"pocgithub","id":"JonasUliana/CVE-2017-8759","title":"JonasUliana/CVE-2017-8759","date":"2017-09-17","url":"https://github.com/JonasUliana/CVE-2017-8759"},{"source":"pocgithub","id":"ashr/CVE-2017-8759-exploits","title":"ashr/CVE-2017-8759-exploits","date":"2017-09-19","url":"https://github.com/ashr/CVE-2017-8759-exploits"},{"source":"pocgithub","id":"sythass/CVE-2017-8759","title":"sythass/CVE-2017-8759","date":"2017-09-19","url":"https://github.com/sythass/CVE-2017-8759"},{"source":"pocgithub","id":"l0n3rs/CVE-2017-8759","title":"l0n3rs/CVE-2017-8759","date":"2017-09-24","url":"https://github.com/l0n3rs/CVE-2017-8759"},{"source":"pocgithub","id":"ChaitanyaHaritash/CVE-2017-8759","title":"ChaitanyaHaritash/CVE-2017-8759","date":"2018-12-11","url":"https://github.com/ChaitanyaHaritash/CVE-2017-8759"},{"source":"pocgithub","id":"smashinu/CVE-2017-8759Expoit","title":"smashinu/CVE-2017-8759Expoit","date":"2019-05-24","url":"https://github.com/smashinu/CVE-2017-8759Expoit"},{"source":"pocgithub","id":"adeljck/CVE-2017-8759","title":"adeljck/CVE-2017-8759","date":"2019-06-25","url":"https://github.com/adeljck/CVE-2017-8759"},{"source":"pocgithub","id":"zhengkook/CVE-2017-8759","title":"zhengkook/CVE-2017-8759","date":"2020-01-02","url":"https://github.com/zhengkook/CVE-2017-8759"},{"source":"pocgithub","id":"GayashanM/OHTS","title":"GayashanM/OHTS","date":"2020-05-12","url":"https://github.com/GayashanM/OHTS"},{"source":"pocgithub","id":"varunsaru/SNP","title":"varunsaru/SNP","date":"2020-05-12","url":"https://github.com/varunsaru/SNP"}],"products":[{"vendor":"microsoft","product":".net framework"},{"vendor":"microsoft","product":".net_framework"},{"vendor":"microsoft corporation","product":"microsoft .net framework"}],"references":[{"url":"http://www.securityfocus.com/bid/100742","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/bhdresh/CVE-2017-8759","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://github.com/nccgroup/CVE-2017-8759","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/42711/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039324","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/GitHubAssessments/CVE_Assessments_01_2020","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8759"},{"url":"https://www.exploit-db.com/exploits/42711"},{"url":"https://github.com/advisories/GHSA-rc4w-p9f6-7c7q"}],"sources":{"cve":[{"id":"CVE-2017-8759","description":"Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\"","status":"published","published":"2017-09-13T01:00:00Z","modified":"2025-10-21T23:55:34.79Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:33:15.201133Z"}],"euvd":[{"id":"EUVD-2017-17705","description":"Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\"","status":"published","published":"2017-09-13T01:00:00Z","modified":"2025-10-21T23:55:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2021-11-03","updated_at":"2026-11-02T20:31:23.427989Z"}],"ghsa":[{"id":"GHSA-rc4w-p9f6-7c7q","title":"Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to...","description":"Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\"","status":"published","published":"2022-05-14T03:50:14Z","modified":"2025-10-22T00:32:27Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20","CWE-94"],"updated_at":"2026-11-02T15:04:05.344883Z"}],"kev":[{"id":"CVE-2017-8759","title":"Microsoft .NET Framework Remote Code Execution Vulnerability","description":"Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take control of an affected system.","cwes":["CWE-20"],"kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:17.050017Z"}],"nvd":[{"id":"CVE-2017-8759","description":"Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\"","status":"published","published":"2017-09-13T01:29:12.193Z","modified":"2026-06-17T01:26:54.67Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:03:58.85945Z"}]}}