CVE-2018-8517: Microsoft .NET Framework

High severity, CVSS 7.5. EPSS: 5.7% chance of exploitation in the next 30 days.

A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.

Affected products

• Microsoft .NET Framework: version 3.5 only; version 3.5.1 only; version 4.5.2 only; version 4.6.2 only; version 4.6 only; version 4.6.1 only; …

Published 2018-12-12. Last modified 2026-06-17.