CVE-2020-0605

CVE-2020-0605 is a remote code execution vulnerability in .NET software that allows an attacker to run arbitrary code by failing to check the source markup of a file. This affects numerous Microsoft products including .NET Core, .NET Framework, and various Windows operating systems. With a CVSS score of 8.8 (HIGH), it presents a significant risk, requiring user interaction (UI:R) but with low attack complexity (AC:L) over a network (AV:N), potentially leading to high impact on confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) is currently available and it's not listed in CISA's KEV catalog, its high FAUCET Risk Score of 96/100, above-average EPSS, and media coverage indicate a notable level of concern.