CVE-2017-0248

7.5 highEPSS 5.5%

High (7.5) in microsoft .net framework. EPSS 5.5% chance of exploitation in the next 30 days.

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 5.5% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2017-05-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:.net_framework

References

http://www.securityfocus.com/bid/98117
http://www.securitytracker.com/id/1038458
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0248
http://www.securityfocus.com/bid/98117
http://www.securitytracker.com/id/1038458

Check your stack JSON