CVE-2018-8356

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2018
Source publication: Jul 11, 2018
Source updated: Aug 5, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 1.0, .NET Core 2.0, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Microsoft .NET Framework

Vendor: Microsoft
Product: Microsoft .NET Framework
Platforms: Unknown
Default status: Unknown

Microsoft .NET Framework · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 10 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 10 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 10 Version 1607 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 10 Version 1607 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 10 Version 1703 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 10 Version 1703 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 10 Version 1709 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 10 Version 1709 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 10 Version 1803 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 10 Version 1803 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 8.1 for 32-bit systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows 8.1 for x64-based systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows Server 2012	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows Server 2012 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows Server 2012 R2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows Server 2012 R2 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows Server 2016	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows Server 2016 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows Server, version 1709 (Server Core Installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5 on Windows Server, version 1803 (Server Core Installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5.1 on Windows 7 for 32-bit Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5.1 on Windows 7 for x64-based Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows 7 for 32-bit Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows 7 for x64-based Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows 8.1 for 32-bit systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows 8.1 for x64-based systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows RT 8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows Server 2012	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows Server 2012 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows Server 2012 R2	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.5.2 on Windows Server 2012 R2 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6 on Windows Server 2008 for x64-based Systems Service Pack 2	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows 8.1 for x64-based systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows RT 8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows Server 2012	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows Server 2012 R2	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.7.2 on Windows 10 Version 1803 for 32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.7.2 on Windows 10 Version 1803 for x64-based Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.7.2 on Windows Server, version 1803 (Server Core Installation)	`affected`	Unavailable	Unavailable	Unavailable	None listed

.NET Core

Vendor: Microsoft
Product: .NET Core
Platforms: Unknown
Default status: Unknown

.NET Core · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0	`affected`	Unavailable	Unavailable	Unavailable	None listed
1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

ASP.NET Core

Vendor: Microsoft
Product: ASP.NET Core
Platforms: Unknown
Default status: Unknown

ASP.NET Core · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0	`affected`	Unavailable	Unavailable	Unavailable	None listed
1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

.NET Framework

Vendor: Microsoft
Product: .NET Framework
Platforms: Unknown
Default status: Unknown

.NET Framework · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.7.2 Developer Pack	`affected`	Unavailable	Unavailable	Unavailable	None listed