Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2020-1147: Microsoft .NET Framework, Share Point, and Visual Studio Remote Code Execution Vulnerability

Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for deserialization of the XML content.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2020-1147Microsoft
Related
CVE-2026-96951: Microsoft Windows Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 13, 2026
CVE-2026-65660: Microsoft Share Point Code Injection Vulnerability Known Exploited Vulnerabilities · Sep 25, 2026