.NET Framework
CVE-2018-8360 — .NET Framework Information Disclosure Vulnerability
Executive Summary
An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments. The vulnerability is caused when .NET Framework is used in high-load/high-density network connections where content from one stream can blend into another stream. To exploit the vulnerability, an attacker who can access one tenant in a high-load/high-density environment could potentially trigger multi-tenanted data exposure from one customer to another. The security update addresses the vulnerability by correcting the way .NET Framework handles high-load/high-density network connections.
Overview
Important
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
EPSS Score
0.08972
probability of exploitation in the next 30 days
0.9479 percentile - updated 2026-08-14
View on FIRST.org
Affected Products
30 affected products
| Product | KB Article | Severity | Impact | Restart Required |
|---|---|---|---|---|
| Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 4344151 (Monthly Rollup) 4344176 (Security Only) Important Information Disclosure 4291501; 4340559 3142023 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 4344151 (Monthly Rollup) 4344176 (Security Only) Important Information Disclosure 4291501; 4340559 3142023 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 4344151 (Monthly Rollup) 4344176 (Security Only) Important Information Disclosure 4291501; 4340559 3142023 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 4344151 (Monthly Rollup) 4344176 (Security Only) Important Information Disclosure 4291501; 4340559 3142023 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 4344151 (Monthly Rollup) 4344176 (Security Only) Important Information Disclosure 4291501; 4340559 3142023 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 4344151 (Monthly Rollup) 4344176 (Security Only) Important Information Disclosure 4291501; 4340559 3142023 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems | 4343892 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems | 4343892 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems | 4343887 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems | 4343887 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems | 4343885 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems | 4343885 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for 32-bit Systems | 4343897 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for x64-based Systems | 4343897 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems | 4343909 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems | 4343909 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems 4344153 (Monthly Rollup) 4344178 (Security Only) Important Information Disclosure 4291497; 4340558 3142026; 3142030 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems 4344153 (Monthly Rollup) 4344178 (Security Only) Important Information Disclosure 4291497; 4340558 3142026; 3142030 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5 on Windows Server 2012 4344150 (Monthly Rollup) 4344175 (Security Only) Important Information Disclosure 4291495; 4340557 3142025 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation) 4344150 (Monthly Rollup) 4344175 (Security Only) Important Information Disclosure 4291495; 4340557 3142025 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5 on Windows Server 2012 R2 4344153 (Monthly Rollup) 4344178 (Security Only) Important Information Disclosure 4291497; 4340558 3142026; 3142030 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation) 4344153 (Monthly Rollup) 4344178 (Security Only) Important Information Disclosure 4291497; 4340558 3142026; 3142030 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5 on Windows Server 2016 | 4343887 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation) | 4343887 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows Server, version 1709 (Server Core Installation) | 4343897 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5 on Windows Server, version 1803 (Server Core Installation) | 4343909 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1 4344152 (Monthly Rollup) 4344177 (Security Only) Important Information Disclosure 4291493; 4340556 3142024 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1 4344152 (Monthly Rollup) 4344177 (Security Only) Important Information Disclosure 4291493; 4340556 3142024 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 4344152 (Monthly Rollup) 4344177 (Security Only) Important Information Disclosure 4291493; 4340556 3142024 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 4344152 (Monthly Rollup) 4344177 (Security Only) Important Information Disclosure 4291493; 4340556 3142024 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 4344152 (Monthly Rollup) 4344177 (Security Only) Important Information Disclosure 4291493; 4340556 3142024 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1 4344149 (Monthly Rollup) 4344173 (Security Only) Important Information Disclosure 4291493, 4340556 4020507 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1 4344149 (Monthly Rollup) 4344173 (Security Only) Important Information Disclosure 4291493, 4340556 4020507 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems 4344147 (Monthly Rollup) 4344171 (Security Only) Important Information Disclosure 4291497; 4340558 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems 4344147 (Monthly Rollup) 4344171 (Security Only) Important Information Disclosure 4291497; 4340558 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows RT 8.1 | 4344147 (Monthly Rollup) |
Important | Information Disclosure | Maybe |
| Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 4344149 (Monthly Rollup) 4344173 (Security Only) Important Information Disclosure 4291501; 4340559 4020507 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2 4344149 (Monthly Rollup) 4344173 (Security Only) Important Information Disclosure 4291501; 4340559 4020507 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 4344149 (Monthly Rollup) 4344173 (Security Only) Important Information Disclosure 4291493, 4340556 4020507 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 4344149 (Monthly Rollup) 4344173 (Security Only) Important Information Disclosure 4291493, 4340556 4020507 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows Server 2012 4344148 (Monthly Rollup) 4344172 (Security Only) Important Information Disclosure 4291495; 4340557 4020506 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation) 4344148 (Monthly Rollup) 4344172 (Security Only) Important Information Disclosure 4291495; 4340557 4020506 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 4344147 (Monthly Rollup) 4344171 (Security Only) Important Information Disclosure 4291497; 4340558 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation) 4344147 (Monthly Rollup) 4344171 (Security Only) Important Information Disclosure 4291497; 4340558 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems | 4343887 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems | 4343887 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 | 4343887 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation) | 4343887 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems | 4343892 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems | 4343892 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1 4344146 (Monthly Rollup) 4344167 (Security Only) Important Information Disclosure 4291493, 4340556 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1 4344146 (Monthly Rollup) 4344167 (Security Only) Important Information Disclosure 4291493, 4340556 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems 4344145 (Monthly Rollup) 4344166 (Security Only) Important Information Disclosure 4291497; 4340558 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for x64-based systems 4344145 (Monthly Rollup) 4344166 (Security Only) Important Information Disclosure 4291497; 4340558 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows RT 8.1 | 4344145 (Monthly Rollup) |
Important | Information Disclosure | Maybe |
| Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 4344146 (Monthly Rollup) 4344167 (Security Only) Important Information Disclosure 4291493, 4340556 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 4344146 (Monthly Rollup) 4344167 (Security Only) Important Information Disclosure 4291493, 4340556 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 4344144 (Monthly Rollup) 4344165 (Security Only) Important Information Disclosure 4291495; 4340557 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation) 4344144 (Monthly Rollup) 4344165 (Security Only) Important Information Disclosure 4291495; 4340557 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 4344145 (Monthly Rollup) 4344166 (Security Only) Important Information Disclosure 4291497; 4340558 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation) 4344145 (Monthly Rollup) 4344166 (Security Only) Important Information Disclosure 4291497; 4340558 Base: N/A Temporal: N/A Vector: N/A Maybe None Microsoft .NET Framework 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems | 4343897 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems | 4343897 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.7.1/4.7.2 on Windows Server, version 1709 (Server Core Installation) | 4343897 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for 32-bit Systems | 4343909 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for x64-based Systems | 4343909 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.7.2 on Windows Server, version 1803 (Server Core Installation) | 4343909 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for 32-bit Systems | 4343885 (Security Update) |
Important | Information Disclosure | Yes |
| Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for x64-based Systems | 4343885 (Security Update) |
Important | Information Disclosure | Yes |
Patches
7 patches
| Article | Type | Restart |
|---|---|---|
4343892 |
Security Update | Yes |
4343887 |
Security Update | Yes |
4343885 |
Security Update | Yes |
4343897 |
Security Update | Yes |
4343909 |
Security Update | Yes |
4344147 |
Monthly Rollup | Maybe |
4344145 |
Monthly Rollup | Maybe |
Known Exploits
No known exploits have been linked for this CVE yet. When available, exploit references will be sourced from public repositories and may be unverified, incomplete, or non-functional. Always review code carefully before use in any environment.
Acknowledgments
None
References
On This Page