CVE-2019-0820

high

Description

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

References

https://access.redhat.com/errata/RHSA-2019:1259

https://www.tenable.com/blog/critical-remote-code-execution-vulnerability-cve-2019-0708-addressed-in-patch-tuesday-updates

https://github.com/advisories/GHSA-cmhx-cq75-c4mj

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0820

Details

Source: Mitre, NVD

Published: 2019-05-16

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.0157

Detections

Analytics