{"action":"Upgrade Microsoft.NETCore.App.Runtime.osx-x64 to 3.1.6 or later.","affected":[{"fixed":"3.1.6","introduced":"3.1.0"}],"component":"Microsoft.NETCore.App.Runtime.osx-x64","cve_ids":["CVE-2020-1147"],"ecosystem":"NuGet","epss":0.93966,"exploited":true,"fixed_versions":["3.1.6"],"ghsa_id":"GHSA-g5vf-38cp-4px9","id":"tcs_01M5N8NTQW4ESKHT0Y9Z9ZAEMQ","modified_at":"2025-10-22T19:19:28.278997Z","published_at":"2022-05-24T17:22:57Z","references":["https://osv.dev/vulnerability/GHSA-g5vf-38cp-4px9","https://nvd.nist.gov/vuln/detail/CVE-2020-1147","https://github.com/dotnet/announcements/issues/159","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147","https://www.exploitalert.com/view-details.html?id=35992","http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html","http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html","http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-g5vf-38cp-4px9#NuGet/Microsoft.NETCore.App.Runtime.osx-x64","url":"https://osv.dev/vulnerability/GHSA-g5vf-38cp-4px9"},{"source":"kev","source_id":"CVE-2020-1147","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":".NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability"}