CVE-2020-1147: A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio whe...

Security readout for executives and security teams

CVE-2020-1147 is a Microsoft remote code execution issue affecting SharePoint, .NET Framework, .NET Core, and Visual Studio. A crafted XML-related input could cause vulnerable software to run attacker-controlled code. CISA lists it as known exploited, so unpatched systems should be treated as urgent exposure. Most likely exposure is unpatched SharePoint Server deployments and systems running affected .NET Framework, .NET Core, or Visual Studio versions listed by Microsoft. Exposure depends on whether those components process untrusted XML or related markup input. Treat as high priority because CISA confirms known exploitation and affected SharePoint systems can be business-critical. Patch validation should be tracked to closure, especially for externally reachable collaboration environments and legacy Microsoft server estates. Mitigation focus: Apply Microsoft updates from the MSRC advisory for each affected product.; Prioritize internet-facing or business-critical SharePoint servers.; Inventory affected .NET Framework, .NET Core, and Visual Studio installations..

Prepared

May 22, 2026, 05:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.