CVE-2017-0248

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."

• CWE-295

• http://www.securityfocus.com/bid/98117Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038458
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0248Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98117Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038458
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0248Patch, Vendor Advisory

Published

May 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0242An information disclosure vulnerability exists in the way so…
• CVE-2017-0243Microsoft Office allows a remote code execution vulnerabilit…
• CVE-2017-0244The kernel in Windows Server 2008 SP2 and R2 SP1, and Window…
• CVE-2017-0245The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP…
• CVE-2017-0246The Graphics Component in the kernel-mode drivers in Windows…
• CVE-2017-0247A denial of service vulnerability exists when the ASP.NET Co…
• CVE-2017-0249An elevation of privilege vulnerability exists when the ASP.…
• CVE-2017-0250Microsoft JET Database Engine in Windows Server 2008 SP2 and…
• CVE-2017-0252A remote code execution vulnerability exists in Microsoft Ch…
• CVE-2017-0254Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office …
• CVE-2017-0255Microsoft SharePoint Foundation 2013 SP1 allows an elevation…
• CVE-2017-0256A spoofing vulnerability exists when the ASP.NET Core fails …