OnlyPatch
.NET Framework

CVE-2022-41064 — .NET Framework Information Disclosure Vulnerability

Important CVSS 5.8 EPSS 0.00747 2022-11 archive

Executive Summary

None

Overview

5.8
CVSS MEDIUM
Important
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
Category Information Disclosure
Released Nov 8 2022
Last Updated Nov 8 2022
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.00747 — 0.51093 percentile
NVD CVSS 5.8 MEDIUM — matches MSRC

CVSS Vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
ATTACK VECTOR
Adjacent_network
ATTACK COMPLEXITY
High
PRIVILEGES REQUIRED
Low
USER INTERACTION
None
SCOPE
Changed
CONFIDENTIALITY
High
INTEGRITY
None
AVAILABILITY
None
EXPLOIT CODE MATURITY
Unproven
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 5.1

EPSS Score

0.00747
probability of exploitation in the next 30 days
0.51093 percentile - updated 2026-07-25
View on FIRST.org

Affected Products

55 affected products
Product KB Article Severity Impact Restart Required
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems 5019964 (Security Update) Important Information Disclosure Yes
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems 5019964 (Security Update) Important Information Disclosure Yes
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 5019964 (Security Update) Important Information Disclosure Yes
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation) 5019964 (Security Update) Important Information Disclosure Yes
Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 5020691 (Monthly Rollup) 5020681 (Security Only) Important Information Disclosure 5018550, 5013873 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.7.04005.02 6.0.04005.01 Maybe None Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 5020691 (Monthly Rollup) 5020681 (Security Only) Important Information Disclosure 5018550, 5013873 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.7.04005.02 6.0.04005.01 Maybe None Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2 5020691 (Monthly Rollup) 5020681 (Security Only) Important Information Disclosure 5018550, 5013873 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.7.04005.02 6.0.04005.01 Maybe None Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 5020691 (Monthly Rollup) 5020681 (Security Only) Important Information Disclosure 5018550, 5013873 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.7.04005.02 6.0.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1 5020688 (Monthly Rollup) 5020678 (Security Only) Important Information Disclosure 5013870, 5018547 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.7.04005.02 6.0.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1 5020688 (Monthly Rollup) 5020678 (Security Only) Important Information Disclosure 5013870, 5018547 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.7.04005.02 6.0.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems 5020690 (Monthly Rollup) 5020680 (Security Only) Important Information Disclosure 5016568, 5018549 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04005.02 6.3.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for x64-based systems 5020690 (Monthly Rollup) 5020680 (Security Only) Important Information Disclosure 5016568, 5018549 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04005.02 6.3.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows RT 8.1 5020690 (Monthly Rollup) 5020680 (Security Only) Important Information Disclosure 5016568, 5018549 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04005.02 6.3.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 5020688 (Monthly Rollup) 5020678 (Security Only) Important Information Disclosure 5013870, 5018547 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.7.04005.02 6.0.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 5020688 (Monthly Rollup) 5020678 (Security Only) Important Information Disclosure 5013870, 5018547 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.7.04005.02 6.0.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 5020689 (Monthly Rollup) 5020679 (Security Only) Important Information Disclosure 5013871, 5018548 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.7.04005.02 6.2.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation) 5020689 (Monthly Rollup) 5020679 (Security Only) Important Information Disclosure 5013871, 5018548 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.7.04005.02 6.2.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 5020690 (Monthly Rollup) 5020680 (Security Only) Important Information Disclosure 5016568, 5018549 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04005.02 6.3.04005.01 Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation) 5020690 (Monthly Rollup) 5020680 (Security Only) Important Information Disclosure 5016568, 5018549 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04005.02 6.3.04005.01 Maybe None Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for 32-bit Systems 5019970 (Security Update) Important Information Disclosure Yes
Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for x64-based Systems 5019970 (Security Update) Important Information Disclosure Yes
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1809 for 32-bit Systems 5020685 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems 5020685 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1809 for x64-based Systems 5020685 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.7.2 on Windows Server 2019 5020685 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.7.2 on Windows Server 2019 (Server Core installation) 5020685 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems 5020614 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems 5020614 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 1809 for 32-bit Systems 5020685 (Monthly Rollup) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 1809 for ARM64-based Systems 5020685 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 1809 for x64-based Systems 5020685 (Monthly Rollup) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 20H2 for 32-bit Systems 5020686 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 20H2 for ARM64-based Systems 5020686 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 21H1 for 32-bit Systems 5020801 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 21H1 for ARM64-based Systems 5020801 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 21H1 for x64-based Systems 5020801 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 21H2 for 32-bit Systems 5020687 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 21H2 for ARM64-based Systems 5020687 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 21H2 for x64-based Systems 5020687 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 22H2 for 32-bit Systems 5020694 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 22H2 for ARM64-based Systems 5020694 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 10 Version 22H2 for x64-based Systems 5020694 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 11 version 21H2 for ARM64-based Systems 5020695 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 11 version 21H2 for x64-based Systems 5020695 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1 5020688 (Monthly Rollup) 5020678 (Security Only) Important Information Disclosure 5013870, 5018547 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04585.02 6.2.04585.01 Maybe None Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1 5020688 (Monthly Rollup) 5020678 (Security Only) Important Information Disclosure 5013870, 5018547 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04585.02 6.2.04585.01 Maybe None Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems 5020690 (Monthly Rollup) 5020680 (Security Only) Important Information Disclosure 5016568, 5018549 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04005.02 6.3.04585.01 Maybe None Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems 5020690 (Monthly Rollup) 5020680 (Security Only) Important Information Disclosure 5016568, 5018549 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04005.02 6.3.04585.01 Maybe None Microsoft .NET Framework 4.8 on Windows RT 8.1 5020690 (Monthly Rollup) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 5020688 (Monthly Rollup) 5020678 (Security Only) Important Information Disclosure 5013870, 5018547 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04585.02 6.2.04585.01 Maybe None Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 5020688 (Monthly Rollup) 5020678 (Security Only) Important Information Disclosure 5013870, 5018547 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04585.02 6.2.04585.01 Maybe None Microsoft .NET Framework 4.8 on Windows Server 2012 5020689 (Monthly Rollup) 5020679 (Security Only) Important Information Disclosure 5013871, 5018548 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04585.02 6.2.04585.01 Maybe None Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation) 5020689 (Monthly Rollup) 5020679 (Security Only) Important Information Disclosure 5013871, 5018548 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04585.02 6.2.04585.01 Maybe None Microsoft .NET Framework 4.8 on Windows Server 2012 R2 5020690 (Monthly Rollup) 5020680 (Security Only) Important Information Disclosure 5016568, 5018549 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04005.02 6.3.04585.01 Maybe None Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) 5020690 (Monthly Rollup) 5020680 (Security Only) Important Information Disclosure 5016568, 5018549 Base: 5.8 Temporal: 5.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 4.8.04005.02 6.3.04585.01 Maybe None Microsoft .NET Framework 4.8 on Windows Server 2016 5020614 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation) 5020614 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows Server 2019 5020685 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows Server 2019 (Server Core installation) 5020685 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows Server 2022 5020692 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8 on Windows Server 2022 (Server Core installation) 5020692 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 20H2 for 32-bit Systems 5020686 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 20H2 for ARM64-based Systems 5020686 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 21H1 for 32-bit Systems 5020801 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 21H1 for ARM64-based Systems 5020801 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 21H1 for x64-based Systems 5020801 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems 5020687 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems 5020687 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 21H2 for x64-based Systems 5020687 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems 5020694 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems 5020694 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 10 Version 22H2 for x64-based Systems 5020694 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 11 version 21H2 for ARM64-based Systems 5020695 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 11 version 21H2 for x64-based Systems 5020695 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems 5020622 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows 11 Version 22H2 for x64-based Systems 5020622 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows Server 2022 5020692 (Security Update) Important Information Disclosure Maybe
Microsoft .NET Framework 4.8.1 on Windows Server 2022 (Server Core installation) 5020692 (Security Update) Important Information Disclosure Maybe
Nuget 2.1.2 Release Notes (Security Update) Important Information Disclosure Maybe
Nuget 4.8.5 Release Notes (Security Update) Important Information Disclosure Maybe

Patches

14 patches
Article Type Restart
5019964 Security Update Yes
5019970 Security Update Yes
5020685 Security Update Maybe
5020614 Security Update Maybe
5020685 Monthly Rollup Maybe
5020686 Security Update Maybe
5020801 Security Update Maybe
5020687 Security Update Maybe
5020694 Security Update Maybe
5020695 Security Update Maybe
5020690 Monthly Rollup Maybe
5020692 Security Update Maybe
5020622 Security Update Maybe
Release Notes Security Update Maybe

Known Exploits

Acknowledgments

None

On This Page