{"id":"CVE-2018-0786","aliases":["GHSA-jc8g-xhw5-6x46"],"url":"https://o3.security/vulnerability/CVE-2018-0786","summary":"Improper Certificate Validation in Microsoft .NET Framework components","details":"Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka \".NET Security Feature Bypass Vulnerability.\"","published":"2018-01-10T01:29:00.320Z","modified":"2026-07-08T05:52:02.262688433Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"NuGet","name":"Microsoft.NETCore.UniversalWindowsPlatform","fixedVersion":"5.2.4"},{"ecosystem":"NuGet","name":"Microsoft.NETCore.UniversalWindowsPlatform","fixedVersion":"5.3.5"},{"ecosystem":"NuGet","name":"Microsoft.NETCore.UniversalWindowsPlatform","fixedVersion":"5.4.2"},{"ecosystem":"NuGet","name":"Microsoft.NETCore.UniversalWindowsPlatform","fixedVersion":"6.0.6"},{"ecosystem":"NuGet","name":"System.ServiceModel.Primitives","fixedVersion":"4.4.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.Primitives","fixedVersion":"4.3.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.Primitives","fixedVersion":"4.1.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.Http","fixedVersion":"4.4.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.Http","fixedVersion":"4.3.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.Http","fixedVersion":"4.1.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.NetTcp","fixedVersion":"4.4.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.NetTcp","fixedVersion":"4.3.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.NetTcp","fixedVersion":"4.1.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.Duplex","fixedVersion":"4.4.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.Duplex","fixedVersion":"4.3.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.Duplex","fixedVersion":"4.0.2"},{"ecosystem":"NuGet","name":"System.ServiceModel.Security","fixedVersion":"4.4.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.Security","fixedVersion":"4.3.1"},{"ecosystem":"NuGet","name":"System.ServiceModel.Security","fixedVersion":"4.0.2"},{"ecosystem":"NuGet","name":"System.Private.ServiceModel","fixedVersion":"4.4.1"},{"ecosystem":"NuGet","name":"System.Private.ServiceModel","fixedVersion":"4.3.1"},{"ecosystem":"NuGet","name":"System.Private.ServiceModel","fixedVersion":"4.1.1"}],"fix":null,"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/102380"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1040152"},{"type":"FIX","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0786"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T05:52:02.262688433Z"}}