All vulnerabilities

Servers and applications

CVE-2020-0603

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.

Severity
High 8.8
Published
14 Jan 2020
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
.NETServers and applications · cpe:a:microsoft:asp.net_core
  • Version 2.1
  • Version 3.0
  • Version 3.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-0603
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-0603