CVE-2020-0646

Microsoft .NET Framework remote code execution vulnerability allows attackers to execute arbitrary code on vulnerable systems.

This vulnerability stems from improper input validation in the .NET Framework, enabling remote code execution without requiring user interaction. DIB organizations must ensure all .NET Framework components are patched immediately, as unpatched instances are actively exploited in the wild and can lead to full system compromise, data exfiltration, or lateral movement within networks.

Shame score — A known RCE vulnerability in a widely deployed framework that remains unpatched and actively exploited in the wild, representing a severe negligence in patch management and system hardening.