CVE-2017-0160

CVE-2017-0160 is a remote code execution vulnerability affecting multiple versions of the Microsoft .NET Framework (2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7). An attacker with local system access can exploit this flaw to execute arbitrary malicious code. This vulnerability carries a CVSSv3 score of 7.8 (HIGH), indicating a high impact on confidentiality, integrity, and availability, with low attack complexity and requiring low privileges. While not listed in CISA's KEV catalog, an ExploitDB entry (EDB-41903) exists demonstrating arbitrary .NET serialization for RCE, and it has garnered some community discussion and media coverage.