{
    "id": "CVE-2018-8421",
    "published": "2018-09-13 00:29:02",
    "last_modified": "2026-06-17 02:04:49",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.0",
    "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-20",
    "description": "A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka \".NET Framework Remote Code Execution Vulnerability.\" This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.7.2, Microsoft .NET Framework 2.0.",
    "epss_score": "0.29075",
    "epss_percentile": "0.98117",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-03 18:17:22",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "EPSS 29.1% — above the 10% action threshold."
    },
    "products": [
        {
            "vendor": "microsoft",
            "product": ".net_framework"
        },
        {
            "vendor": "microsoft",
            "product": "windows_10"
        },
        {
            "vendor": "microsoft",
            "product": "windows_7"
        },
        {
            "vendor": "microsoft",
            "product": "windows_8.1"
        },
        {
            "vendor": "microsoft",
            "product": "windows_rt_8.1"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server_2008"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server_2012"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server_2016"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "http://www.securityfocus.com/bid/105222",
        "http://www.securitytracker.com/id/1041636",
        "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8421",
        "http://www.securityfocus.com/bid/105222",
        "http://www.securitytracker.com/id/1041636",
        "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8421"
    ]
}