CVE-2012-0162: Microsoft .NET Framework

High severity, CVSS 9.3. EPSS: 21.9% chance of exploitation in the next 30 days.

Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Buffer Allocation Vulnerability."

Affected products

• Microsoft .NET Framework: version 4.0 only

Published 2012-05-09. Last modified 2026-06-16.