What happened
Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take control of an affected system.
Affected versions
.NET Framework: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 42711Microsoft Windows .NET Framework - Remote Code ExecutionVoulnet2017-09-13VerifiedSploitusExploit for CVE-2017-8759. CVSS 9.3.Sploitus index2026-09-30T16:15:27+00:00CandidateSploitusCVE-2017-8759 weaponised via RTF file requiring no user interaction.KitPloit2026-10-03T05:02:53Candidatekitploit.comCVE-2017-8759 weaponised via RTF file requiring no user interaction.ru2026-10-03T05:02:53CandidatePoC-in-GitHub · Voulnet/CVE-2017-8759-Exploit-sampleRunning CVE-2017-8759 exploit sample.★ 256Voulnet2017-09-13CandidatePoC-in-GitHub · nccgroup/CVE-2017-8759NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements★ 94nccgroup2017-09-13CandidatePoC-in-GitHub · vysecurity/CVE-2017-8759CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.★ 176vysecurity2017-09-13CandidatePoC-in-GitHub · BasuCert/CVE-2017-8759CVE-2017-8759 Research★ 1BasuCert2017-09-13CandidatePoC-in-GitHub · homjxi0e/CVE-2017-8759_-SOAP_WSDLCVE-2017-8759 Remote Code Execution Vulnerability On SOAP WDSL - Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 3.5★ 0homjxi0e2017-09-14CandidatePoC-in-GitHub · bhdresh/CVE-2017-8759Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.★ 312bhdresh2017-09-14CandidatePoC-in-GitHub · JonasUliana/CVE-2017-8759Simple C# implementation of CVE-2017-8759★ 5JonasUliana2017-09-17CandidatePoC-in-GitHub · sythass/CVE-2017-8759CVE-2017-8759★ 0sythass2017-09-19CandidatePoC-in-GitHub · ashr/CVE-2017-8759-exploitsTwo versions of CVE-2017-8759 exploits★ 2ashr2017-09-19CandidatePoC-in-GitHub · l0n3rs/CVE-2017-8759★ 0l0n3rs2017-09-24CandidatePoC-in-GitHub · ChaitanyaHaritash/CVE-2017-8759Just My ports of CVE-2017-8759★ 0ChaitanyaHaritash2018-12-11CandidatePoC-in-GitHub · smashinu/CVE-2017-8759Expoityehnah★ 0smashinu2019-05-24CandidatePoC-in-GitHub · adeljck/CVE-2017-8759CVE-2017-8759 微软word漏洞利用脚本★ 0adeljck2019-06-25CandidatePoC-in-GitHub · zhengkook/CVE-2017-8759CVE-2017-8759 use file★ 0zhengkook2020-01-02CandidatePoC-in-GitHub · varunsaru/SNPCVE-2017-8759 || report related with execute code vulnerability★ 0varunsaru2020-05-12CandidatePoC-in-GitHub · GayashanM/OHTSCVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability★ 0GayashanM2020-05-12CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.