CVE-2020-0872

—

CVSS 3.1

9.6 critical

EPSS

10%p95

Published

Mar 12, 2020 (Mar 12, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output, aka 'Remote Code Execution Vulnerability in Application Inspector'.

Vendors: microsoft
Products: application inspector
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (10.1%)

In the news3 stories

Microsoft Patch Tuesday, March 2020 Edition

Krebs on SecurityMar 11, 03:15 UTC · Mar 11, 2020Vulnerability CVE-2020-0688 CVE-2020-0852 CVE-2020-0872

Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage

Cisco TalosMar 10, 17:23 UTC · Mar 10, 2020Vulnerability CVE-2020-0796 CVE-2020-0684 CVE-2020-0801+114 CVEs

March 2020 Patch Tuesday: Microsoft fixes 115 vulnerabilities, Adobe none

Help Net SecurityMar 10, 00:00 UTC · Mar 10, 2020Vulnerability in the wildCVE-2020-0852 CVE-2020-0684 CVE-2020-0872+3 CVEs