CVE-2016-0132

CRITICAL · CVSS 9.8 EPSS 21.98%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-03-09 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-0132

Severity

CRITICAL

CVSS

9.8

EPSS

21.98%

Microsoft

Original Filing — NVD Description

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."