Title

Microsoft .NET Framework Security Bypass Vulnerability (MS16-035) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a security bypass vulnerability in Microsoft .NET Framework. To exploit this vulnerability, an attacker would send a malicious XML document to an affected application. If successfully exploited, this vulnerability would allow an attacker to bypass security restrictions and perform unauthorized actions.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-67135

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.