CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
microsoftCNA
7.5 HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA-ADPADP
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
microsoft.net_framework
4.8
microsoft.net_framework
4.6.2
microsoft.net_framework
4.7
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
4.6.2
microsoft.net_framework
3.5.1
microsoft.net_framework
3.5
microsoft.net_framework
4.6.2
microsoft.net_framework
3.5
microsoft.net_framework
4.8.1
microsoft.net_framework
3.5
microsoft.net_framework
4.8
microsoft.net_framework
3.5
microsoft.net_framework
4.7.2
microsoft.net_framework
3.5
microsoft.net_framework
4.6.2
microsoft.net_framework
4.7
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
3.5
microsoft.net_framework
3.0:sp2
microsoft.net_framework
2.0:sp2
microsoft.net
6.0.0
microsoft.net
7.0.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dotnet6
lunar
Fixed 6.0.118-0ubuntu1~23.04.1
released
kinetic
Fixed 6.0.118-0ubuntu1~22.10.1
released
jammy
Fixed 6.0.118-0ubuntu1~22.04.1
released
focal
dne
bionic
dne
xenial
dne
trusty
dne
dotnet7
lunar
Fixed 7.0.107-0ubuntu1~23.04.1
released
kinetic
Fixed 7.0.107-0ubuntu1~22.10.1
released
jammy
Fixed 7.0.107-0ubuntu1~22.04.1
released
focal
dne
bionic
dne
xenial
dne
trusty
dne
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936