Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2019-0657

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual…

Medium5.9EPSS 4.6%
Published
Updated
Reserved
Assigned by
microsoft

Description

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

Scores

CVSS scores of CVE-2019-0657, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0Medium5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS (exploitation in 30 days)
4.6% · top 8.4% of all CVEs (5 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.9.

Weakness

Affected products

  • Microsoft · Microsoft .NET Framework 4.5.2

    • affected Windows 7 for 32-bit Systems Service Pack 1
    • affected Windows 7 for x64-based Systems Service Pack 1
    • affected Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
    • affected Windows Server 2008 R2 for x64-based Systems Service Pack 1
    • affected Windows Server 2012
    • affected Windows Server 2012 (Server Core installation)
    • affected Windows 8.1 for 32-bit systems
    • affected Windows 8.1 for x64-based systems
    • affected Windows Server 2012 R2
    • affected Windows RT 8.1
    • affected Windows Server 2012 R2 (Server Core installation)
    • affected Windows Server 2008 for 32-bit Systems Service Pack 2
    • affected Windows Server 2008 for x64-based Systems Service Pack 2

  • Microsoft · Microsoft .NET Framework 4.6

    • affected Windows Server 2008 for 32-bit Systems Service Pack 2
    • affected Windows Server 2008 for x64-based Systems Service Pack 2

  • Microsoft · .NET Core

    • affected 1
    • affected 2.1
    • affected 2.2

  • Microsoft · Microsoft Visual Studio

    • affected 2017

  • Microsoft · Microsoft .NET Framework 4.7.2

    • affected Windows 10 Version 1803 for 32-bit Systems
    • affected Windows 10 Version 1803 for x64-based Systems
    • affected Windows Server, version 1803 (Server Core Installation)
    • affected Windows 10 Version 1803 for ARM64-based Systems
    • affected Windows 10 Version 1809 for 32-bit Systems
    • affected Windows 10 Version 1809 for x64-based Systems
    • affected Windows Server 2019
    • affected Windows Server 2019 (Server Core installation)

  • Microsoft · Microsoft .NET Framework 4.6/4.6.1/4.6.2

    • affected Windows 10 for 32-bit Systems
    • affected Windows 10 for x64-based Systems

  • Microsoft · Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2

    • affected Windows 7 for 32-bit Systems Service Pack 1
    • affected Windows 7 for x64-based Systems Service Pack 1
    • affected Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
    • affected Windows Server 2008 R2 for x64-based Systems Service Pack 1
    • affected Windows Server 2012
    • affected Windows Server 2012 (Server Core installation)
    • affected Windows 8.1 for 32-bit systems
    • affected Windows 8.1 for x64-based systems
    • affected Windows Server 2012 R2
    • affected Windows RT 8.1
    • affected Windows Server 2012 R2 (Server Core installation)

  • Microsoft · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

    • affected Windows Server 2016
    • affected Windows 10 Version 1607 for 32-bit Systems
    • affected Windows 10 Version 1607 for x64-based Systems
    • affected Windows Server 2016 (Server Core installation)

  • Microsoft · Microsoft .NET Framework 4.7/4.7.1/4.7.2

    • affected Windows 10 Version 1703 for 32-bit Systems
    • affected Windows 10 Version 1703 for x64-based Systems

  • Microsoft · Microsoft .NET Framework 4.7.1/4.7.2

    • affected Windows 10 Version 1709 for 32-bit Systems
    • affected Windows 10 Version 1709 for x64-based Systems
    • affected Windows Server, version 1709 (Server Core Installation)
    • affected Windows 10 Version 1709 for ARM64-based Systems

  • Microsoft · PowerShell Core

    • affected 6.1
    • affected 6.2

  • Microsoft · Microsoft Visual Studio 2017

    • affected version 15.9

  • Microsoft · Microsoft .NET Framework 3.5

    • affected Windows Server 2012
    • affected Windows Server 2012 (Server Core installation)
    • affected Windows 8.1 for 32-bit systems
    • affected Windows 8.1 for x64-based systems
    • affected Windows Server 2012 R2
    • affected Windows Server 2012 R2 (Server Core installation)
    • affected Windows 10 for 32-bit Systems
    • affected Windows 10 for x64-based Systems
    • affected Windows Server 2016
    • affected Windows 10 Version 1607 for 32-bit Systems
    • affected Windows 10 Version 1607 for x64-based Systems
    • affected Windows 10 Version 1703 for 32-bit Systems
    • affected Windows 10 Version 1703 for x64-based Systems
    • affected Windows 10 Version 1709 for 32-bit Systems
    • affected Windows 10 Version 1709 for x64-based Systems
    • affected Windows Server, version 1709 (Server Core Installation)
    • affected Windows 10 Version 1803 for 32-bit Systems
    • affected Windows 10 Version 1803 for x64-based Systems
    • affected Windows Server, version 1803 (Server Core Installation)
    • affected Windows 10 Version 1803 for ARM64-based Systems
    • affected Windows 10 Version 1809 for 32-bit Systems
    • affected Windows 10 Version 1809 for x64-based Systems
    • affected Windows Server 2019
    • affected Windows Server 2019 (Server Core installation)
    • affected Windows 10 Version 1709 for ARM64-based Systems

  • Microsoft · Microsoft .NET Framework 3.0

    • affected Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
    • affected Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
    • affected Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2

  • Microsoft · Microsoft .NET Framework 2.0

    • affected Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2

  • Microsoft · Microsoft .NET Framework 3.5.1

    • affected Windows 7 for 32-bit Systems Service Pack 1
    • affected Windows 7 for x64-based Systems Service Pack 1
    • affected Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
    • affected Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
    • affected Windows Server 2008 R2 for x64-based Systems Service Pack 1

Affected packages

From reviewed advisories of the GitHub Advisory Database.

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2019-0657 badge
[![CVE-2019-0657](https://trackcve.app/badge/CVE-2019-0657.svg)](https://trackcve.app/cve/CVE-2019-0657)

Record last updated .