← back
CVE-2014-1806

CVE-2014-1806

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 40%
from disclosure to weapon187 days
Published on NVDMay 14
1st PoC+187d
exploitation probability
40%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which allows remote attackers to execute arbitrary code via vectors involving malformed objects, aka "TypeFilterLevel Vulnerability."
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.