CVE-2018-8260

CVE-2018-8260 is a Remote Code Execution (RCE) vulnerability in .NET Framework 4.7.2 that arises from insufficient validation of file source markup. This flaw impacts various Microsoft Windows operating systems and their respective .NET Framework installations. With a CVSS score of 8.8 (High), this vulnerability can be exploited remotely with low attack complexity, leading to high impacts on confidentiality, integrity, and availability if a user is tricked into opening a malicious file. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered some community and media attention, with one article covering its fix in a Microsoft Patch Tuesday update.