What happened
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
Affected versions
Microsoft .NET Framework 3.5: 3.5.0 through before 2.0.50727.8987 AND 3.0.30729.8982 (custom); 3.0.0.0 through before 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 (custom); 4.7.0 through before 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0 (custom); 4.8.0 through before 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 (custom); 4.8.1 through before 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 (custom); 4.7.0 through before 4.7.4145.0 (custom); 4.8.0 through before 4.8.4806.0 (custom); 4.8.0.0 through before 4.8.9347.0 (custom); 18.0 through before 18.8.3 (custom) Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.