Vulnerabilites related to Microsoft - PowerShell 7.2
cve-2023-33126
Vulnerability from cvelistv5
Published
2023-06-13 23:26
Modified
2025-01-01 01:44
Severity ?
7.3 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Summary
.NET and Visual Studio Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126vendor-advisory
Impacted products
Vendor Product Version
Microsoft .NET 6.0 Version: 6.0.0   < 6.0.18
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.7
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.16
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.22
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.8
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.3
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.12
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-33126",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-08T14:17:17.554630Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-08T14:17:47.264Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T15:39:35.835Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET and Visual Studio Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.18",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.7",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.16",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.22",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.8",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.3",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.12",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.18",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.7",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.16",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.22",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.8",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.3",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.12",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-06-13T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET and Visual Studio Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Remote Code Execution",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T01:44:12.050Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET and Visual Studio Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126",
            },
         ],
         title: ".NET and Visual Studio Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-33126",
      datePublished: "2023-06-13T23:26:22.404Z",
      dateReserved: "2023-05-17T21:16:44.895Z",
      dateUpdated: "2025-01-01T01:44:12.050Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-36792
Vulnerability from cvelistv5
Published
2023-09-12 16:58
Modified
2025-01-01 02:04
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
Visual Studio Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36792vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Version: 15.9.0   < 15.9.57
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.21
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.30
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.13
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.24
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.13
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.9
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.12
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.7 Version: 17.7.0   < 17.6.9
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.04667.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.04667.03
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.04063.05
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Version: 3.0.0.0   < 10.0.14393.6252
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04063.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.09186.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04063.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 and 4.6.2 Version: 4.7.0   < 10.0.10240.20162
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 Version: 3.5.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5.1 Version: 3.5.0   < 3.0.30729.8957
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-36792",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-06-28T14:00:38.974579Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-28T14:00:45.881Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T17:01:09.977Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "Visual Studio Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36792",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "15.9.57",
                     status: "affected",
                     version: "15.9.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.21",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.30",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.13",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.24",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.13",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.9",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.12",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.7",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.9",
                     status: "affected",
                     version: "17.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2016",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2012",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04667.02",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2019",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows Server 2022",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04667.03",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows Server 2019",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.05",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2016",
                  "Windows 10 Version 1607 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.6252",
                     status: "affected",
                     version: "3.0.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2012 R2",
                  "Windows Server 2012",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.09186.01",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for 32-bit Systems",
                  "Windows 10 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 and 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.20162",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
               ],
               product: "Microsoft .NET Framework 3.5.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "15.9.57",
                           versionStartIncluding: "15.9.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.21",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.30",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.13",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.24",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.13",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.9",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.12",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.9",
                           versionStartIncluding: "17.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04667.02",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04667.03",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.05",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.6252",
                           versionStartIncluding: "3.0.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.09186.01",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.20162",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-09-12T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: "Visual Studio Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-190",
                     description: "CWE-190: Integer Overflow or Wraparound",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T02:04:33.725Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: "Visual Studio Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36792",
            },
         ],
         title: "Visual Studio Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-36792",
      datePublished: "2023-09-12T16:58:40.779Z",
      dateReserved: "2023-06-27T15:11:59.871Z",
      dateUpdated: "2025-01-01T02:04:33.725Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-38095
Vulnerability from cvelistv5
Published
2024-07-09 17:03
Modified
2025-03-11 16:40
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Summary
.NET and Visual Studio Denial of Service Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095vendor-advisory
Impacted products
Vendor Product Version
Microsoft PowerShell 7.4 Version: 7.4.0   < 7.4.4
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.22
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.32
 Create a notification for this product.
   Microsoft .NET 8.0 Version: 1.0.0   < 8.0.7
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.21
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.17
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.8 Version: 17.8.0   < 17.8.12
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.10 Version: 17.10   < 17.10.4
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-38095",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-09T20:02:27.324531Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-09T20:02:36.933Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T04:04:25.264Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET and Visual Studio Denial of Service Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.4.4",
                     status: "affected",
                     version: "7.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.22",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.32",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 8.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "8.0.7",
                     status: "affected",
                     version: "1.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.21",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.17",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.8.12",
                     status: "affected",
                     version: "17.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.10",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.10.4",
                     status: "affected",
                     version: "17.10",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.4.4",
                           versionStartIncluding: "7.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.22",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.32",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "8.0.7",
                           versionStartIncluding: "1.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.21",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.17",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.8.12",
                           versionStartIncluding: "17.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.10.4",
                           versionStartIncluding: "17.10",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2024-07-09T07:00:00.000Z",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET and Visual Studio Denial of Service Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "CWE-20: Improper Input Validation",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-03-11T16:40:24.982Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET and Visual Studio Denial of Service Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095",
            },
         ],
         title: ".NET and Visual Studio Denial of Service Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2024-38095",
      datePublished: "2024-07-09T17:03:24.803Z",
      dateReserved: "2024-06-11T22:36:08.184Z",
      dateUpdated: "2025-03-11T16:40:24.982Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-24936
Vulnerability from cvelistv5
Published
2023-06-14 14:52
Modified
2025-01-01 01:43
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.16
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.22
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.8
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.18
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.7
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.3
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.12
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.3.5
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.4644.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.4644.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.4050.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Version: 3.0.0.0   < 10.0.14393.5989
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04043.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.9166.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04043.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 and 4.6.2 Version: 4.7.0   < 10.0.10240.19983
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5.1 Version: 3.5.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 Version: 3.5.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-24936",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-05-29T14:48:19.526051Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-04T17:21:22.183Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T11:11:43.705Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.16",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.22",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.8",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.18",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.7",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.3",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.12",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.3.5",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2012 R2",
                  "Windows Server 2016",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.4644.0",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows Server 2022",
                  "Windows Server 2019",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.4644.0",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2019",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.4050.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.5989",
                     status: "affected",
                     version: "3.0.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012 R2",
                  "Windows Server 2012",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04043.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022 (Server Core installation)",
                  "Windows Server 2022",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.9166.0",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04043.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for 32-bit Systems",
                  "Windows 10 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 and 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.19983",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2012 R2",
               ],
               product: "Microsoft .NET Framework 3.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.16",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.22",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.8",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.18",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.7",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.3",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.12",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.3.5",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.4644.0",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.4644.0",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.4050.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.5989",
                           versionStartIncluding: "3.0.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04043.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.9166.0",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04043.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.19983",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-06-13T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Elevation of Privilege",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T01:43:33.488Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936",
            },
         ],
         title: ".NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-24936",
      datePublished: "2023-06-14T14:52:19.301Z",
      dateReserved: "2023-01-31T20:37:47.257Z",
      dateUpdated: "2025-01-01T01:43:33.488Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-36794
Vulnerability from cvelistv5
Published
2023-09-12 16:58
Modified
2025-01-01 02:04
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
Visual Studio Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36794vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Version: 15.9.0   < 15.9.57
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.21
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.30
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.13
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.12
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.24
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.13
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.9
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.7 Version: 17.7.0   < 17.6.9
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.04667.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.04667.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.04063.05
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Version: 3.0.0.0   < 10.0.14393.6252
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04063.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.09186.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04063.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 and 4.6.2 Version: 4.7.0   < 10.0.10240.20162
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 Version: 3.5.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5.1 Version: 3.5.0   < 3.0.30729.8957
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-36794",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-06-14T15:55:22.038287Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-14T15:55:32.545Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T17:01:09.543Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "Visual Studio Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36794",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "15.9.57",
                     status: "affected",
                     version: "15.9.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.21",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.30",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.13",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.12",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.24",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.13",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.9",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.7",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.9",
                     status: "affected",
                     version: "17.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2016",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04667.02",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2019",
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04667.02",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.05",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.6252",
                     status: "affected",
                     version: "3.0.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.09186.01",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for x64-based Systems",
                  "Windows 10 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 and 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.20162",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "15.9.57",
                           versionStartIncluding: "15.9.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.21",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.30",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.13",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.12",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.24",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.13",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.9",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.9",
                           versionStartIncluding: "17.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04667.02",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04667.02",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.05",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.6252",
                           versionStartIncluding: "3.0.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.09186.01",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.20162",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-09-12T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: "Visual Studio Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-191",
                     description: "CWE-191: Integer Underflow (Wrap or Wraparound)",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T02:04:32.641Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: "Visual Studio Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36794",
            },
         ],
         title: "Visual Studio Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-36794",
      datePublished: "2023-09-12T16:58:39.719Z",
      dateReserved: "2023-06-27T15:11:59.873Z",
      dateUpdated: "2025-01-01T02:04:32.641Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-41076
Vulnerability from cvelistv5
Published
2022-12-13 00:00
Modified
2025-01-02 21:36
Severity ?
8.5 (High) - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
PowerShell Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41076vendor-advisory
Impacted products
Vendor Product Version
Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.8
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.3.1
 Create a notification for this product.
   Microsoft Windows 10 Version 1809 Version: 10.0.17763.0   < 10.0.17763.3770
 Create a notification for this product.
   Microsoft Windows 10 Version 1809 Version: 10.0.0   < 10.0.17763.3770
 Create a notification for this product.
   Microsoft Windows Server 2019 Version: 10.0.17763.0   < 10.0.17763.3770
 Create a notification for this product.
   Microsoft Windows Server 2019 (Server Core installation) Version: 10.0.17763.0   < 10.0.17763.3770
 Create a notification for this product.
   Microsoft Windows 10 Version 21H1 Version: 10.0.0   < 10.0.19043.2364
 Create a notification for this product.
   Microsoft Windows Server 2022 Version: 10.0.20348.0   < 10.0.20348.1366
 Create a notification for this product.
   Microsoft Windows 10 Version 20H2 Version: 10.0.0   < 10.0.19042.2364
 Create a notification for this product.
   Microsoft Windows 11 version 21H2 Version: 10.0.0   < 10.0.22000.1335
 Create a notification for this product.
   Microsoft Windows 10 Version 21H2 Version: 10.0.19043.0   < 10.0.19044.2364
 Create a notification for this product.
   Microsoft Windows 11 version 22H2 Version: 10.0.22621.0   < 10.0.22621.993
 Create a notification for this product.
   Microsoft Windows 10 Version 22H2 Version: 10.0.19045.0   < 10.0.19045.2364
 Create a notification for this product.
   Microsoft Windows 10 Version 1507 Version: 10.0.10240.0   < 10.0.10240.19624
 Create a notification for this product.
   Microsoft Windows 10 Version 1607 Version: 10.0.14393.0   < 10.0.14393.5582
 Create a notification for this product.
   Microsoft Windows Server 2016 Version: 10.0.14393.0   < 10.0.14393.5582
 Create a notification for this product.
   Microsoft Windows Server 2016 (Server Core installation) Version: 10.0.14393.0   < 10.0.14393.5582
 Create a notification for this product.
   Microsoft Windows 7 Version: 6.1.0   < 6.1.7601.26266
 Create a notification for this product.
   Microsoft Windows 7 Service Pack 1 Version: 6.1.0   < 6.1.7601.26266
 Create a notification for this product.
   Microsoft Windows 8.1 Version: 6.3.0   < 6.3.9600.20721
 Create a notification for this product.
   Microsoft Windows Server 2008 Service Pack 2 Version: 6.0.6003.0   < 6.0.6003.21815
 Create a notification for this product.
   Microsoft Windows Server 2008 Service Pack 2 (Server Core installation) Version: 6.0.6003.0   < 6.0.6003.21815
 Create a notification for this product.
   Microsoft Windows Server 2008 Service Pack 2 Version: 6.0.6003.0   < 6.0.6003.21815
 Create a notification for this product.
   Microsoft Windows Server 2008 R2 Service Pack 1 Version: 6.1.7601.0   < 6.1.7601.26266
 Create a notification for this product.
   Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) Version: 6.1.7601.0   < 6.1.7601.26266
 Create a notification for this product.
   Microsoft Windows Server 2012 Version: 6.2.9200.0   < 6.2.9200.24018
 Create a notification for this product.
   Microsoft Windows Server 2012 (Server Core installation) Version: 6.2.9200.0   < 6.2.9200.24018
 Create a notification for this product.
   Microsoft Windows Server 2012 R2 Version: 6.3.9600.0   < 6.3.9600.20721
 Create a notification for this product.
   Microsoft Windows Server 2012 R2 (Server Core installation) Version: 6.3.9600.0   < 6.3.9600.20721
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T12:35:49.474Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41076",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.8",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.3.1",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 1809",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.3770",
                     status: "affected",
                     version: "10.0.17763.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "ARM64-based Systems",
               ],
               product: "Windows 10 Version 1809",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.3770",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2019",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.3770",
                     status: "affected",
                     version: "10.0.17763.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2019 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.3770",
                     status: "affected",
                     version: "10.0.17763.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
                  "ARM64-based Systems",
                  "32-bit Systems",
               ],
               product: "Windows 10 Version 21H1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.19043.2364",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2022",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.20348.1366",
                     status: "affected",
                     version: "10.0.20348.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "ARM64-based Systems",
               ],
               product: "Windows 10 Version 20H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.19042.2364",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
                  "ARM64-based Systems",
               ],
               product: "Windows 11 version 21H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.22000.1335",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "ARM64-based Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 21H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.19044.2364",
                     status: "affected",
                     version: "10.0.19043.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "ARM64-based Systems",
                  "x64-based Systems",
               ],
               product: "Windows 11 version 22H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.22621.993",
                     status: "affected",
                     version: "10.0.22621.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
                  "ARM64-based Systems",
                  "32-bit Systems",
               ],
               product: "Windows 10 Version 22H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.19045.2364",
                     status: "affected",
                     version: "10.0.19045.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 1507",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.19624",
                     status: "affected",
                     version: "10.0.10240.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 1607",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.5582",
                     status: "affected",
                     version: "10.0.14393.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2016",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.5582",
                     status: "affected",
                     version: "10.0.14393.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2016 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.5582",
                     status: "affected",
                     version: "10.0.14393.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
               ],
               product: "Windows 7",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.1.7601.26266",
                     status: "affected",
                     version: "6.1.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows 7 Service Pack 1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.1.7601.26266",
                     status: "affected",
                     version: "6.1.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
                  "ARM64-based Systems",
               ],
               product: "Windows 8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.3.9600.20721",
                     status: "affected",
                     version: "6.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
               ],
               product: "Windows Server 2008 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.6003.21815",
                     status: "affected",
                     version: "6.0.6003.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows Server 2008 Service Pack 2 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.6003.21815",
                     status: "affected",
                     version: "6.0.6003.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2008  Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.6003.21815",
                     status: "affected",
                     version: "6.0.6003.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2008 R2 Service Pack 1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.1.7601.26266",
                     status: "affected",
                     version: "6.1.7601.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.1.7601.26266",
                     status: "affected",
                     version: "6.1.7601.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.2.9200.24018",
                     status: "affected",
                     version: "6.2.9200.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.2.9200.24018",
                     status: "affected",
                     version: "6.2.9200.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012 R2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.3.9600.20721",
                     status: "affected",
                     version: "6.3.9600.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012 R2 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.3.9600.20721",
                     status: "affected",
                     version: "6.3.9600.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.8",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.3.1",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.17763.3770",
                           versionStartIncluding: "10.0.17763.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
                           versionEndExcluding: "10.0.17763.3770",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.17763.3770",
                           versionStartIncluding: "10.0.17763.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.17763.3770",
                           versionStartIncluding: "10.0.17763.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_21H1:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "10.0.19043.2364",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.20348.1366",
                           versionStartIncluding: "10.0.20348.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.19042.2364",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "10.0.22000.1335",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.19044.2364",
                           versionStartIncluding: "10.0.19043.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:*",
                           versionEndExcluding: "10.0.22621.993",
                           versionStartIncluding: "10.0.22621.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "10.0.19045.2364",
                           versionStartIncluding: "10.0.19045.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.10240.19624",
                           versionStartIncluding: "10.0.10240.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.14393.5582",
                           versionStartIncluding: "10.0.14393.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.5582",
                           versionStartIncluding: "10.0.14393.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.5582",
                           versionStartIncluding: "10.0.14393.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*",
                           versionEndExcluding: "6.1.7601.26266",
                           versionStartIncluding: "6.1.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*",
                           versionEndExcluding: "6.1.7601.26266",
                           versionStartIncluding: "6.1.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "6.3.9600.20721",
                           versionStartIncluding: "6.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.0.6003.21815",
                           versionStartIncluding: "6.0.6003.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.0.6003.21815",
                           versionStartIncluding: "6.0.6003.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "6.0.6003.21815",
                           versionStartIncluding: "6.0.6003.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.1.7601.26266",
                           versionStartIncluding: "6.1.7601.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.1.7601.26266",
                           versionStartIncluding: "6.1.7601.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.2.9200.24018",
                           versionStartIncluding: "6.2.9200.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.2.9200.24018",
                           versionStartIncluding: "6.2.9200.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.3.9600.20721",
                           versionStartIncluding: "6.3.9600.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.3.9600.20721",
                           versionStartIncluding: "6.3.9600.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2022-12-13T08:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: "PowerShell Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 8.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Remote Code Execution",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-02T21:36:54.618Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: "PowerShell Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41076",
            },
         ],
         title: "PowerShell Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2022-41076",
      datePublished: "2022-12-13T00:00:00",
      dateReserved: "2022-09-19T00:00:00",
      dateUpdated: "2025-01-02T21:36:54.618Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-26788
Vulnerability from cvelistv5
Published
2022-04-15 19:04
Modified
2025-01-02 18:51
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
PowerShell Elevation of Privilege Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26788vendor-advisory
Impacted products
Vendor Product Version
Microsoft Windows 10 Version 1809 Version: 10.0.17763.0   < 10.0.17763.2803
 Create a notification for this product.
   Microsoft Windows 10 Version 1809 Version: 10.0.0   < 10.0.17763.2803
 Create a notification for this product.
   Microsoft Windows Server 2019 Version: 10.0.17763.0   < 10.0.17763.2803
 Create a notification for this product.
   Microsoft Windows Server 2019 (Server Core installation) Version: 10.0.17763.0   < 10.0.17763.2803
 Create a notification for this product.
   Microsoft Windows 10 Version 1909 Version: 10.0.0   < 10.0.18363.2212
 Create a notification for this product.
   Microsoft Windows 10 Version 21H1 Version: 10.0.0   < 10.0.19043.1645
 Create a notification for this product.
   Microsoft Windows Server 2022 Version: 10.0.20348.0   < 10.0.20348.643
 Create a notification for this product.
   Microsoft Windows 10 Version 20H2 Version: 10.0.0   < 10.0.19042.1645
 Create a notification for this product.
   Microsoft Windows Server version 20H2 Version: 10.0.0   < 10.0.19042.1645
 Create a notification for this product.
   Microsoft Windows 11 version 21H2 Version: 10.0.0   < 10.0.22000.613
 Create a notification for this product.
   Microsoft Windows 10 Version 21H2 Version: 10.0.19043.0   < 10.0.19044.1645
 Create a notification for this product.
   Microsoft Windows 10 Version 1507 Version: 10.0.10240.0   < 10.0.10240.19265
 Create a notification for this product.
   Microsoft Windows 10 Version 1607 Version: 10.0.14393.0   < 10.0.14393.5066
 Create a notification for this product.
   Microsoft Windows Server 2016 Version: 10.0.14393.0   < 10.0.14393.5066
 Create a notification for this product.
   Microsoft Windows Server 2016 (Server Core installation) Version: 10.0.14393.0   < 10.0.14393.5066
 Create a notification for this product.
   Microsoft Windows 8.1 Version: 6.3.0   < 6.3.9600.20337
 Create a notification for this product.
   Microsoft Windows Server 2008 R2 Service Pack 1 Version: 6.1.7601.0   < 6.1.7601.25954
 Create a notification for this product.
   Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) Version: 6.1.7601.0   < 6.1.7601.25954
 Create a notification for this product.
   Microsoft Windows Server 2012 Version: 6.2.9200.0   < 6.2.9200.23679
 Create a notification for this product.
   Microsoft Windows Server 2012 (Server Core installation) Version: 6.2.9200.0   < 6.2.9200.23679
 Create a notification for this product.
   Microsoft Windows Server 2012 R2 Version: 6.3.9600.0   < 6.3.9600.20337
 Create a notification for this product.
   Microsoft Windows Server 2012 R2 (Server Core installation) Version: 6.3.9600.0   < 6.3.9600.20337
 Create a notification for this product.
   Microsoft PowerShell 7.0 Version: 7.0.0   < 7.0.10
 Create a notification for this product.
   Microsoft PowerShell 7.1 Version: 7.1.0   < 7.1.7
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.3
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T05:11:44.512Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "PowerShell Elevation of Privilege Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26788",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 1809",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.2803",
                     status: "affected",
                     version: "10.0.17763.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "ARM64-based Systems",
               ],
               product: "Windows 10 Version 1809",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.2803",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2019",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.2803",
                     status: "affected",
                     version: "10.0.17763.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2019 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.17763.2803",
                     status: "affected",
                     version: "10.0.17763.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
                  "ARM64-based Systems",
               ],
               product: "Windows 10 Version 1909",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.18363.2212",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
                  "ARM64-based Systems",
                  "32-bit Systems",
               ],
               product: "Windows 10 Version 21H1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.19043.1645",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2022",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.20348.643",
                     status: "affected",
                     version: "10.0.20348.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "ARM64-based Systems",
               ],
               product: "Windows 10 Version 20H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.19042.1645",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server version 20H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.19042.1645",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
                  "ARM64-based Systems",
               ],
               product: "Windows 11 version 21H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.22000.613",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "ARM64-based Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 21H2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.19044.1645",
                     status: "affected",
                     version: "10.0.19043.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 1507",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.19265",
                     status: "affected",
                     version: "10.0.10240.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
               ],
               product: "Windows 10 Version 1607",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.5066",
                     status: "affected",
                     version: "10.0.14393.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2016",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.5066",
                     status: "affected",
                     version: "10.0.14393.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2016 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.5066",
                     status: "affected",
                     version: "10.0.14393.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "32-bit Systems",
                  "x64-based Systems",
                  "ARM64-based Systems",
               ],
               product: "Windows 8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.3.9600.20337",
                     status: "affected",
                     version: "6.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2008 R2 Service Pack 1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.1.7601.25954",
                     status: "affected",
                     version: "6.1.7601.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.1.7601.25954",
                     status: "affected",
                     version: "6.1.7601.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.2.9200.23679",
                     status: "affected",
                     version: "6.2.9200.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.2.9200.23679",
                     status: "affected",
                     version: "6.2.9200.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012 R2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.3.9600.20337",
                     status: "affected",
                     version: "6.3.9600.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "x64-based Systems",
               ],
               product: "Windows Server 2012 R2 (Server Core installation)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.3.9600.20337",
                     status: "affected",
                     version: "6.3.9600.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.10",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.1.7",
                     status: "affected",
                     version: "7.1.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.3",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.17763.2803",
                           versionStartIncluding: "10.0.17763.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
                           versionEndExcluding: "10.0.17763.2803",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.17763.2803",
                           versionStartIncluding: "10.0.17763.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.17763.2803",
                           versionStartIncluding: "10.0.17763.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.18363.2212",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_21H1:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "10.0.19043.1645",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.20348.643",
                           versionStartIncluding: "10.0.20348.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.19042.1645",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.19042.1645",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_11_21H2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "10.0.22000.613",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.19044.1645",
                           versionStartIncluding: "10.0.19043.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.10240.19265",
                           versionStartIncluding: "10.0.10240.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "10.0.14393.5066",
                           versionStartIncluding: "10.0.14393.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.5066",
                           versionStartIncluding: "10.0.14393.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.5066",
                           versionStartIncluding: "10.0.14393.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*",
                           versionEndExcluding: "6.3.9600.20337",
                           versionStartIncluding: "6.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.1.7601.25954",
                           versionStartIncluding: "6.1.7601.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.1.7601.25954",
                           versionStartIncluding: "6.1.7601.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.2.9200.23679",
                           versionStartIncluding: "6.2.9200.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.2.9200.23679",
                           versionStartIncluding: "6.2.9200.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.3.9600.20337",
                           versionStartIncluding: "6.3.9600.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                           versionEndExcluding: "6.3.9600.20337",
                           versionStartIncluding: "6.3.9600.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.10",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.1.7",
                           versionStartIncluding: "7.1.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.3",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2022-04-12T08:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: "PowerShell Elevation of Privilege Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Elevation of Privilege",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-02T18:51:27.763Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: "PowerShell Elevation of Privilege Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26788",
            },
         ],
         title: "PowerShell Elevation of Privilege Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2022-26788",
      datePublished: "2022-04-15T19:04:25",
      dateReserved: "2022-03-09T00:00:00",
      dateUpdated: "2025-01-02T18:51:27.763Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-23267
Vulnerability from cvelistv5
Published
2022-05-10 20:33
Modified
2025-01-02 18:57
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Summary
.NET and Visual Studio Denial of Service Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23267vendor-advisory
Impacted products
Vendor Product Version
Microsoft .NET Core 3.1 Version: 3.1   < 3.1.25
 Create a notification for this product.
   Microsoft .NET 5.0 Version: 5.0.0   < 5.0.17
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Version: 15.0.0   < 16.9.21
 Create a notification for this product.
   Microsoft Visual Studio 2019 for Mac version 8.10 Version: 8.1.0   < 8.10.24
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.14
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.10
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.5
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.1 Version: 17.0.0   < 17.1.7
 Create a notification for this product.
   Microsoft PowerShell 7.0 Version: 7.0.0   < 7.0.11
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.4
 Create a notification for this product.
   Microsoft Visual Studio 2022 for Mac version 17.0 Version: 17.0.0   < 17.0.3
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T03:36:20.350Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23267",
               },
               {
                  name: "FEDORA-2022-d69fee9f38",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB/",
               },
               {
                  name: "FEDORA-2022-9a1d5ea33c",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO/",
               },
               {
                  name: "FEDORA-2022-256d559f0c",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET Core 3.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.1.25",
                     status: "affected",
                     version: "3.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 5.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "5.0.17",
                     status: "affected",
                     version: "5.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.9.21",
                     status: "affected",
                     version: "15.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Visual Studio 2019 for Mac version 8.10",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "8.10.24",
                     status: "affected",
                     version: "8.1.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.14",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.10",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.5",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.1.7",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.11",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.4",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Visual Studio 2022 for Mac version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.3",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.1.25",
                           versionStartIncluding: "3.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "5.0.17",
                           versionStartIncluding: "5.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.9.21",
                           versionStartIncluding: "15.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:macos:*:*",
                           versionEndExcluding: "8.10.24",
                           versionStartIncluding: "8.1.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.14",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.10",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.5",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.1.7",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.11",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.4",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.3",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2022-05-10T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET and Visual Studio Denial of Service Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Denial of Service",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-02T18:57:48.914Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET and Visual Studio Denial of Service Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23267",
            },
         ],
         title: ".NET and Visual Studio Denial of Service Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2022-23267",
      datePublished: "2022-05-10T20:33:32",
      dateReserved: "2022-01-15T00:00:00",
      dateUpdated: "2025-01-02T18:57:48.914Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-24895
Vulnerability from cvelistv5
Published
2023-06-14 14:52
Modified
2025-01-01 01:43
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24895vendor-advisory
Impacted products
Vendor Product Version
Microsoft .NET 7.0 Version: 7.0.0   < 7.0.7
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.22
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.16
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.8
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.3
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.12
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.3.5
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.4644.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.4644.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.4050.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Version: 3.0.0.0   < 10.0.14393.5989
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04043.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.9166.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04043.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 and 4.6.2 Version: 4.7.0   < 10.0.10240.19983
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 Version: 3.5.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5.1 Version: 3.5.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-24895",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-12T14:58:02.929435Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-12T14:58:08.964Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T11:11:42.252Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24895",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.7",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.22",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.16",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.8",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.3",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.12",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.3.5",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2016",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2012 R2",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.4644.0",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2019",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2022",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.4644.0",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.4050.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.5989",
                     status: "affected",
                     version: "3.0.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04043.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.9166.0",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04043.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for 32-bit Systems",
                  "Windows 10 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 and 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.19983",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.7",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.22",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.16",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.8",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.3",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.12",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.3.5",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.4644.0",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.4644.0",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.4050.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.5989",
                           versionStartIncluding: "3.0.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04043.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.9166.0",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04043.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.19983",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-06-13T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Remote Code Execution",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T01:43:32.903Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24895",
            },
         ],
         title: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-24895",
      datePublished: "2023-06-14T14:52:18.749Z",
      dateReserved: "2023-01-31T20:32:35.471Z",
      dateUpdated: "2025-01-01T01:43:32.903Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-36793
Vulnerability from cvelistv5
Published
2023-09-12 16:58
Modified
2025-01-01 02:04
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
Visual Studio Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36793vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Version: 15.9.0   < 15.9.57
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.21
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.30
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.13
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.13
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.24
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.12
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.9
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.7 Version: 17.7.0   < 17.6.9
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.04667.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.04667.03
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Version: 3.0.0.0   < 10.0.14393.6252
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.04063.05
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04063.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.09186.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04063.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 and 4.6.2 Version: 4.7.0   < 10.0.10240.20162
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 Version: 3.5.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5.1 Version: 3.5.0   < 3.0.30729.8957
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-36793",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-05-29T15:20:19.558478Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-04T17:25:44.719Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T17:01:09.928Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "Visual Studio Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36793",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "15.9.57",
                     status: "affected",
                     version: "15.9.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.21",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.30",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.13",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.13",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.24",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.12",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.9",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.7",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.9",
                     status: "affected",
                     version: "17.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2016",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04667.02",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2019 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04667.03",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.6252",
                     status: "affected",
                     version: "3.0.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows Server 2019",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.05",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.02",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.09186.01",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for 32-bit Systems",
                  "Windows 10 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 and 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.20162",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "15.9.57",
                           versionStartIncluding: "15.9.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.21",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.30",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.13",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.13",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.24",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.12",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.9",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.9",
                           versionStartIncluding: "17.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04667.02",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04667.03",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.6252",
                           versionStartIncluding: "3.0.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.05",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.02",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.09186.01",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.20162",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-09-12T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: "Visual Studio Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-122",
                     description: "CWE-122: Heap-based Buffer Overflow",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T02:04:33.186Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: "Visual Studio Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36793",
            },
         ],
         title: "Visual Studio Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-36793",
      datePublished: "2023-09-12T16:58:40.256Z",
      dateReserved: "2023-06-27T15:11:59.872Z",
      dateUpdated: "2025-01-01T02:04:33.186Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-36796
Vulnerability from cvelistv5
Published
2023-09-12 16:58
Modified
2025-01-01 02:04
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
Visual Studio Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36796vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.9
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.7 Version: 17.7.0   < 17.7.6
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Version: 15.9.0   < 15.9.57
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.21
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.30
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.13
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2013 Update 5 Version: 12.0.0   < 12.0.40707.0
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2015 Update 3 Version: 14.0.0   < 14.0.27559.0
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.13
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.24
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.12
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.04667.03
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.04667.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.04063.05
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Version: 3.0.0.0   < 10.0.14393.6252
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04063.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.09186.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04063.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 and 4.6.2 Version: 4.7.0   < 10.0.10240.20162
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 Version: 3.5.0   < 3.0.30729.8957
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5.1 Version: 3.5.0   < 3.0.30729.8957
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-36796",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-05-29T18:14:53.378773Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-04T17:25:47.414Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T17:01:09.624Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "Visual Studio Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36796",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.9",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.7",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.7.6",
                     status: "affected",
                     version: "17.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "15.9.57",
                     status: "affected",
                     version: "15.9.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.21",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.30",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.13",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2013 Update 5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "12.0.40707.0",
                     status: "affected",
                     version: "12.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2015 Update 3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "14.0.27559.0",
                     status: "affected",
                     version: "14.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.13",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.24",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.12",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04667.03",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2016",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04667.02",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.05",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.6252",
                     status: "affected",
                     version: "3.0.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022 (Server Core installation)",
                  "Windows Server 2022",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.09186.01",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04063.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for x64-based Systems",
                  "Windows 10 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 and 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.20162",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
               ],
               product: "Microsoft .NET Framework 3.5.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8957",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.9",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.7.6",
                           versionStartIncluding: "17.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "15.9.57",
                           versionStartIncluding: "15.9.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.21",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.30",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.13",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:update_5:*:*:*:*:*:*",
                           versionEndExcluding: "12.0.40707.0",
                           versionStartIncluding: "12.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:update3:*:*:*:*:*:*",
                           versionEndExcluding: "14.0.27559.0",
                           versionStartIncluding: "14.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.13",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.24",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.12",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04667.03",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04667.02",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.05",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.6252",
                           versionStartIncluding: "3.0.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.09186.01",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04063.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.20162",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8957",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-09-12T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: "Visual Studio Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-191",
                     description: "CWE-191: Integer Underflow (Wrap or Wraparound)",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T02:04:32.188Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: "Visual Studio Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36796",
            },
         ],
         title: "Visual Studio Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-36796",
      datePublished: "2023-09-12T16:58:39.186Z",
      dateReserved: "2023-06-27T15:11:59.873Z",
      dateUpdated: "2025-01-01T02:04:32.188Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-21409
Vulnerability from cvelistv5
Published
2024-04-09 17:00
Modified
2025-01-23 01:11
Severity ?
7.3 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21409vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2022 version 17.9 Version: 17.0   < 17.9.6
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.18
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.14
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.8 Version: 17.8.0   < 17.8.9
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.3.12
 Create a notification for this product.
   Microsoft PowerShell 7.4 Version: 7.4.0   < 7.4.2
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.19
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.29
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.18
 Create a notification for this product.
   Microsoft .NET 8.0 Version: 1.0.0   < 8.0.4
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.4718.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.4718.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.4092.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.4092.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.9236.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.4092.0
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-21409",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-04-25T00:14:54.668309Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-04T17:37:59.942Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2025-01-17T20:02:52.767Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21409",
               },
               {
                  url: "https://security.netapp.com/advisory/ntap-20250117-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.9",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.9.6",
                     status: "affected",
                     version: "17.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.18",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.14",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.8.9",
                     status: "affected",
                     version: "17.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.3.12",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.4.2",
                     status: "affected",
                     version: "7.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.19",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.29",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.18",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 8.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "8.0.4",
                     status: "affected",
                     version: "1.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.4718.0",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.4718.0",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.4092.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.4092.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 11 Version 23H2 for ARM64-based Systems",
                  "Windows 11 Version 23H2 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.9236.0",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.4092.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.9.6",
                           versionStartIncluding: "17.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.18",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.14",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.8.9",
                           versionStartIncluding: "17.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.3.12",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.4.2",
                           versionStartIncluding: "7.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.19",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.29",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.18",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "8.0.4",
                           versionStartIncluding: "1.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.4718.0",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.4718.0",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.4092.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.4092.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.9236.0",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.4092.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2024-04-09T07:00:00.000Z",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-416",
                     description: "CWE-416: Use After Free",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-23T01:11:02.847Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21409",
            },
         ],
         title: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2024-21409",
      datePublished: "2024-04-09T17:00:08.248Z",
      dateReserved: "2023-12-08T22:45:21.299Z",
      dateUpdated: "2025-01-23T01:11:02.847Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-41089
Vulnerability from cvelistv5
Published
2022-12-13 00:00
Modified
2025-01-02 21:36
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
.NET Framework Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41089vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.11
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.22
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.17
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.3
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.12
 Create a notification for this product.
   Microsoft .NET Core 3.1 Version: 3.1   < 3.1.32
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.1
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.9
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.3.2
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 04590.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 04590.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 04010.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 09115.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 30729.8953
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 30729.8953
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 Version: 3.5.0   < 30729.8953
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5.1 Version: 3.5.0   < 30729.8953
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 04010.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 04010.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.6/4.6.2 Version: 10.0.0   < 10.0.10240.19624
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T12:35:49.218Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41089",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.11",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.22",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.17",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.3",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.12",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET Core 3.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.1.32",
                     status: "affected",
                     version: "3.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.1",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.9",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.3.2",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012 R2",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows 8.1 for 32-bit systems",
                  "Windows Server 2016",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2012",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows 7 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows 7 for 32-bit Systems Service Pack 1",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows RT 8.1",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 8.1 for x64-based systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "04590.02",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 10 Version 21H1 for ARM64-based Systems",
                  "Windows 10 Version 21H1 for x64-based Systems",
                  "Windows 10 Version 21H1 for 32-bit Systems",
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 10 Version 20H2 for 32-bit Systems",
                  "Windows 10 Version 20H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "04590.02",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows Server 2019",
                  "Windows 10 Version 1809 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "04010.02",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H1 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H1 for 32-bit Systems",
                  "Windows 10 Version 20H2 for ARM64-based Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 21H1 for x64-based Systems",
                  "Windows 10 Version 20H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "09115.01",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "30729.8953",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "30729.8953",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 8.1 for x64-based systems",
                  "Windows 8.1 for 32-bit systems",
                  "Windows Server 2012 R2",
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "30729.8953",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 7 for 32-bit Systems Service Pack 1",
                  "Windows 7 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "30729.8953",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 7 for 32-bit Systems Service Pack 1",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows 8.1 for 32-bit systems",
                  "Windows 7 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows RT 8.1",
                  "Windows 8.1 for x64-based systems",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "04010.02",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "04010.02",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for x64-based Systems",
                  "Windows 10 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.6/4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.19624",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.11",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.22",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.17",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.3",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.12",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.1.32",
                           versionStartIncluding: "3.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.1",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.9",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.3.2",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "04590.02",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "04590.02",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "04010.02",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "09115.01",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "30729.8953",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "30729.8953",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "30729.8953",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "30729.8953",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "04010.02",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "04010.02",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.19624",
                           versionStartIncluding: "10.0.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2022-12-13T08:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET Framework Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Remote Code Execution",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-02T21:36:52.938Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET Framework Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41089",
            },
         ],
         title: ".NET Framework Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2022-41089",
      datePublished: "2022-12-13T00:00:00",
      dateReserved: "2022-09-19T00:00:00",
      dateUpdated: "2025-01-02T21:36:52.938Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-29331
Vulnerability from cvelistv5
Published
2023-06-14 14:52
Modified
2025-02-28 21:09
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Summary
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331vendor-advisory
Impacted products
Vendor Product Version
Microsoft .NET 6.0 Version: 6.0.0   < 6.0.18
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.7
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.22
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.16
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.8
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.3
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.12
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.3.5
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.4644.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.4644.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.4050.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Version: 3.0.0.0   < 10.0.14393.5989
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04043.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.9166.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04043.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 and 4.6.2 Version: 4.7.0   < 10.0.10240.19983
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 Version: 3.5.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5.1 Version: 3.5.0   < 3.0.6920.8954; 2.0.50727.8970
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T14:07:45.647Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-29331",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-28T20:20:14.590937Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-28T21:09:08.560Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.18",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.7",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.22",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.16",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.8",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.3",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.12",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.3.5",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012",
                  "Windows Server 2016",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2012 R2",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.4644.0",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.4644.0",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.4050.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.5989",
                     status: "affected",
                     version: "3.0.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04043.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.9166.0",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04043.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for 32-bit Systems",
                  "Windows 10 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 and 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.19983",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.6920.8954; 2.0.50727.8970",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.18",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.7",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.22",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.16",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.8",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.3",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.12",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.3.5",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.4644.0",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.4644.0",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.4050.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.5989",
                           versionStartIncluding: "3.0.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04043.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.9166.0",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04043.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.19983",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.6920.8954; 2.0.50727.8970",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-06-13T07:00:00.000Z",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-400",
                     description: "CWE-400: Uncontrolled Resource Consumption",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T01:43:49.030Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331",
            },
         ],
         title: ".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-29331",
      datePublished: "2023-06-14T14:52:19.830Z",
      dateReserved: "2023-04-04T22:34:18.378Z",
      dateUpdated: "2025-02-28T21:09:08.560Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-43484
Vulnerability from cvelistv5
Published
2024-10-08 17:35
Modified
2025-03-28 15:03
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Summary
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43484vendor-advisory
Impacted products
Vendor Product Version
Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.24
 Create a notification for this product.
   Microsoft PowerShell 7.4 Version: 7.4.0   < 7.4.6
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.20
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.8 Version: 17.8.0   < 17.8.15
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.10 Version: 17.10   < 17.10.8
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.11 Version: 17.11   < 17.11.5
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.35
 Create a notification for this product.
   Microsoft .NET 8.0 Version: 8.0.0   < 8.0.10
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.04115.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.04762.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04115.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.1.9277.03
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04115.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6/4.6.2 Version: 10.0.0.0   < 10.0.10240.20796
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 3.0.30729.8974
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 3.0.30729.8974
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 Version: 3.5.0   < 3.5.30729.8973
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5.1 Version: 3.5.0   < 3.5.1.30729.8974
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.04762.01
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-43484",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-08T18:54:47.769303Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-09T19:48:20.527Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2025-03-28T15:03:03.559Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  url: "https://security.netapp.com/advisory/ntap-20250328-0007/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.24",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.4.6",
                     status: "affected",
                     version: "7.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.20",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.8.15",
                     status: "affected",
                     version: "17.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.10",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.10.8",
                     status: "affected",
                     version: "17.10",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.11",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.11.5",
                     status: "affected",
                     version: "17.11",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.35",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 8.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "8.0.10",
                     status: "affected",
                     version: "8.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2019",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04115.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2019",
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04762.01",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2012",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2012 R2",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04115.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 11 Version 23H2 for ARM64-based Systems",
                  "Windows 11 Version 23H2 for x64-based Systems",
                  "Windows Server 2022, 23H2 Edition (Server Core installation)",
                  "Windows 11 Version 24H2 for ARM64-based Systems",
                  "Windows 11 Version 24H2 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.1.9277.03",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04115.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for x64-based Systems",
                  "Windows 10 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 4.6/4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.20796",
                     status: "affected",
                     version: "10.0.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8974",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8974",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2012",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.5.30729.8973",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.5.1.30729.8974",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016",
                  "Windows Server 2012 R2",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04762.01",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.24",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.4.6",
                           versionStartIncluding: "7.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.20",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.8.15",
                           versionStartIncluding: "17.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.10.8",
                           versionStartIncluding: "17.10",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.11.5",
                           versionStartIncluding: "17.11",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.35",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "8.0.10",
                           versionStartIncluding: "8.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04115.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04762.01",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04115.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.1.9277.03",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04115.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.20796",
                           versionStartIncluding: "10.0.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8974",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8974",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.5.30729.8973",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.5.1.30729.8974",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04762.01",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2024-10-08T07:00:00.000Z",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-407",
                     description: "CWE-407: Inefficient Algorithmic Complexity",
                     lang: "en-US",
                     type: "CWE",
                  },
                  {
                     cweId: "CWE-789",
                     description: "CWE-789: Memory Allocation with Excessive Size Value",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-29T23:50:33.358Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43484",
            },
         ],
         title: ".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2024-43484",
      datePublished: "2024-10-08T17:35:46.715Z",
      dateReserved: "2024-08-14T01:08:33.518Z",
      dateUpdated: "2025-03-28T15:03:03.559Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-33127
Vulnerability from cvelistv5
Published
2023-07-11 17:03
Modified
2025-01-01 01:51
Severity ?
8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Summary
.NET and Visual Studio Elevation of Privilege Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33127vendor-advisory
Impacted products
Vendor Product Version
Microsoft .NET 6.0 Version: 6.0.0   < 6.0.20
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.9
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.23
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.17
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.9
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.5
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.13
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.3.6
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T15:39:35.413Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET and Visual Studio Elevation of Privilege Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33127",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.20",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.9",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.23",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.17",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.9",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.5",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.13",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.3.6",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.20",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.9",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.23",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.17",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.9",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.5",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.13",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.3.6",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-07-11T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET and Visual Studio Elevation of Privilege Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-1220",
                     description: "CWE-1220: Insufficient Granularity of Access Control",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T01:51:49.527Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET and Visual Studio Elevation of Privilege Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33127",
            },
         ],
         title: ".NET and Visual Studio Elevation of Privilege Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-33127",
      datePublished: "2023-07-11T17:03:05.826Z",
      dateReserved: "2023-05-17T21:16:44.895Z",
      dateUpdated: "2025-01-01T01:51:49.527Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-36799
Vulnerability from cvelistv5
Published
2023-09-12 16:58
Modified
2025-01-01 02:04
Severity ?
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Summary
.NET Core and Visual Studio Denial of Service Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36799vendor-advisory
Impacted products
Vendor Product Version
Microsoft .NET 6.0 Version: 6.0.0   < 6.0.24
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.13
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.21
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.13
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.7 Version: 17.7.0   < 17.6.9
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.9
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.14
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.2.14
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-36799",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-05-29T16:23:47.132893Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-04T17:25:46.976Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T17:01:09.676Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET Core and Visual Studio Denial of Service Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36799",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.24",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.13",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.21",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.13",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.7",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.9",
                     status: "affected",
                     version: "17.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.9",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.14",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.14",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.24",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.13",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.21",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.13",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.9",
                           versionStartIncluding: "17.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.9",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.14",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.14",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-09-12T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET Core and Visual Studio Denial of Service Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-400",
                     description: "CWE-400: Uncontrolled Resource Consumption",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T02:04:31.722Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET Core and Visual Studio Denial of Service Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36799",
            },
         ],
         title: ".NET Core and Visual Studio Denial of Service Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-36799",
      datePublished: "2023-09-12T16:58:38.681Z",
      dateReserved: "2023-06-27T15:11:59.874Z",
      dateUpdated: "2025-01-01T02:04:31.722Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-24512
Vulnerability from cvelistv5
Published
2022-03-09 17:08
Modified
2025-01-02 18:35
Severity ?
6.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
Summary
.NET and Visual Studio Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) Version: 16.0.0   < 16.7.26
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Version: 15.0.0   < 16.9.18
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.11
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.7
 Create a notification for this product.
   Microsoft .NET 5.0 Version: 5.0.0   < 5.0.15
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.3
 Create a notification for this product.
   Microsoft .NET Core 3.1 Version: 3.1   < 3.1.23
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.2
 Create a notification for this product.
   Microsoft PowerShell 7.0 Version: 7.0.0   < 7.0.9
 Create a notification for this product.
   Microsoft PowerShell 7.1 Version: 7.1.0   < 7.1.6
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T04:13:56.019Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET and Visual Studio Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.7.26",
                     status: "affected",
                     version: "16.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.9.18",
                     status: "affected",
                     version: "15.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.11",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.7",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 5.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "5.0.15",
                     status: "affected",
                     version: "5.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.3",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET Core 3.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.1.23",
                     status: "affected",
                     version: "3.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.2",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.9",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.1.6",
                     status: "affected",
                     version: "7.1.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.7.26",
                           versionStartIncluding: "16.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.9.18",
                           versionStartIncluding: "15.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.11",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.7",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "5.0.15",
                           versionStartIncluding: "5.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.3",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.1.23",
                           versionStartIncluding: "3.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.2",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.9",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.1.6",
                           versionStartIncluding: "7.1.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2022-03-08T08:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET and Visual Studio Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Remote Code Execution",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-02T18:35:12.932Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET and Visual Studio Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512",
            },
         ],
         title: ".NET and Visual Studio Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2022-24512",
      datePublished: "2022-03-09T17:08:15",
      dateReserved: "2022-02-05T00:00:00",
      dateUpdated: "2025-01-02T18:35:12.932Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-34716
Vulnerability from cvelistv5
Published
2022-08-09 19:55
Modified
2025-01-02 19:34
Severity ?
5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Summary
.NET Spoofing Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Version: 15.9.0   < 15.9.50
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.7
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Version: 15.0.0   < 16.9.24
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.18
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.13
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.8
 Create a notification for this product.
   Microsoft .NET Core 3.1 Version: 3.1   < 3.1.28
 Create a notification for this product.
   Microsoft PowerShell 7.0 Version: 7.0.0   < 7.0.12
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.6
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T09:15:16.112Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET Spoofing Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "15.9.50",
                     status: "affected",
                     version: "15.9.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.7",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.9.24",
                     status: "affected",
                     version: "15.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.18",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.13",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.8",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET Core 3.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.1.28",
                     status: "affected",
                     version: "3.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.12",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.6",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "15.9.50",
                           versionStartIncluding: "15.9.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.7",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.9.24",
                           versionStartIncluding: "15.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.18",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.13",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.8",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.1.28",
                           versionStartIncluding: "3.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.12",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.6",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2022-08-09T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET Spoofing Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Spoofing",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-02T19:34:26.518Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET Spoofing Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716",
            },
         ],
         title: ".NET Spoofing Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2022-34716",
      datePublished: "2022-08-09T19:55:43",
      dateReserved: "2022-06-27T00:00:00",
      dateUpdated: "2025-01-02T19:34:26.518Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-24897
Vulnerability from cvelistv5
Published
2023-06-14 14:52
Modified
2025-01-01 01:43
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24897vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Version: 15.9.0   < 15.9.55
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.16
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.27
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.22
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.8
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2013 Update 5 Version: 12.0.0   < 12.0.40700.0
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2015 Update 3 Version: 14.0.0   < 14.0.27555.0
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.7
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.18
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.3
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.12
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.4644.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.4644.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.4050.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Version: 3.0.0.0   < 10.0.14393.5989
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04043.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.9166.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04043.0
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 and 4.6.2 Version: 4.7.0   < 10.0.10240.19983
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T11:11:43.453Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24897",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-24897",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-09-27T19:43:18.398305Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-09-27T19:43:32.943Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "15.9.55",
                     status: "affected",
                     version: "15.9.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.16",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.27",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.22",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.8",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2013 Update 5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "12.0.40700.0",
                     status: "affected",
                     version: "12.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2015 Update 3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "14.0.27555.0",
                     status: "affected",
                     version: "14.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.7",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.18",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.3",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.12",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows Server 2019",
                  "Windows 10 Version 1809 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.4644.0",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2012",
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.4644.0",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.4050.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2016",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows 10 Version 1607 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.14393.5989",
                     status: "affected",
                     version: "3.0.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04043.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.9166.0",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04043.0",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for 32-bit Systems",
                  "Windows 10 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 and 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.19983",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "15.9.55",
                           versionStartIncluding: "15.9.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.16",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.27",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.22",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.8",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:update_5:*:*:*:*:*:*",
                           versionEndExcluding: "12.0.40700.0",
                           versionStartIncluding: "12.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:update3:*:*:*:*:*:*",
                           versionEndExcluding: "14.0.27555.0",
                           versionStartIncluding: "14.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.7",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.18",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.3",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.12",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.4644.0",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.4644.0",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.4050.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.14393.5989",
                           versionStartIncluding: "3.0.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04043.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.9166.0",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04043.0",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.19983",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-06-13T07:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-122",
                     description: "CWE-122: Heap-based Buffer Overflow",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T01:43:32.304Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24897",
            },
         ],
         title: ".NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-24897",
      datePublished: "2023-06-14T14:52:10.089Z",
      dateReserved: "2023-01-31T20:32:35.472Z",
      dateUpdated: "2025-01-01T01:43:32.304Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-0057
Vulnerability from cvelistv5
Published
2024-01-09 17:56
Modified
2024-12-31 18:39
Severity ?
9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
Summary
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057vendor-advisory
Impacted products
Vendor Product Version
Microsoft .NET 8.0 Version: 1.0.0   < 8.0.1
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.15
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.26
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.23
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.34
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.15
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.11
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.8 Version: 17.8.0   < 17.8.4
 Create a notification for this product.
   Microsoft NuGet 5.11.0 Version: 5.11.0   < 5.11.6.0
 Create a notification for this product.
   Microsoft NuGet 17.4.0 Version: 17.4.0   < 17.4.3.0
 Create a notification for this product.
   Microsoft NUGET 17.6.0 Version: 17.6.0   < 17.6.2.0
 Create a notification for this product.
   Microsoft NuGet 17.8.0 Version: 17.8.0   < 17.8.1.0
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.18
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.3.11
 Create a notification for this product.
   Microsoft PowerShell 7.4 Version: 7.4.0   < 7.4.2
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.04690.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.04690.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.04081.03
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04081.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.09214.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 3.0.50727.8976
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 3.0.50727.8976
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T17:41:15.867Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240208-0007/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 8.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "8.0.1",
                     status: "affected",
                     version: "1.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.15",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.26",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.23",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.34",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.15",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.11",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.8.4",
                     status: "affected",
                     version: "17.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "NuGet 5.11.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "5.11.6.0",
                     status: "affected",
                     version: "5.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "NuGet 17.4.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.3.0",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "NUGET 17.6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.2.0",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "NuGet 17.8.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.8.1.0",
                     status: "affected",
                     version: "17.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.18",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.3.11",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.4.2",
                     status: "affected",
                     version: "7.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04690.02",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04690.02",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2016",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04081.03",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04081.02",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 11 Version 23H2 for ARM64-based Systems",
                  "Windows 11 Version 23H2 for x64-based Systems",
                  "Windows Server 2022, 23H2 Edition (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.09214.01",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.50727.8976",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.50727.8976",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "8.0.1",
                           versionStartIncluding: "1.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.15",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.26",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.23",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.34",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.15",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.11",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.8.4",
                           versionStartIncluding: "17.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "5.11.6.0",
                           versionStartIncluding: "5.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.3.0",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.2.0",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.8.1.0",
                           versionStartIncluding: "17.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.18",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.3.11",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.4.2",
                           versionStartIncluding: "7.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04690.02",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04690.02",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04081.03",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04081.02",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.09214.01",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.50727.8976",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.50727.8976",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2024-01-09T08:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: "NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 9.1,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "CWE-20: Improper Input Validation",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-31T18:39:37.846Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: "NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057",
            },
         ],
         title: "NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2024-0057",
      datePublished: "2024-01-09T17:56:59.552Z",
      dateReserved: "2023-11-22T17:43:37.319Z",
      dateUpdated: "2024-12-31T18:39:37.846Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-43896
Vulnerability from cvelistv5
Published
2021-12-15 14:15
Modified
2024-08-04 04:10
Severity ?
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Summary
Microsoft PowerShell Spoofing Vulnerability
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43896x_refsource_MISC
Impacted products
Vendor Product Version
Microsoft CBL Mariner 2.0 x64 Version: N/A
 Create a notification for this product.
   Microsoft CBL Mariner 2.0 ARM Version: N/A
 Create a notification for this product.
   Microsoft CBL Mariner 1.0 x64 Version: 1.0   < 7.2.1-1
    cpe:2.3:o:microsoft:cbl_mariner:1.0:*:*:*:*:*:*:x64
 Create a notification for this product.
   Microsoft CBL Mariner 1.0 ARM Version: 1.0   < 7.2.1-1
    cpe:2.3:o:microsoft:cbl_mariner:1.0:*:*:*:*:*:*:arm
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.1
    cpe:2.3:a:microsoft:powershell:7.2:*:*:*:*:*:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2021-43896",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-18T15:48:49.193772Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-18T15:48:59.718Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T04:10:17.045Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43896",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               cpes: [],
               platforms: [
                  "x64-based Systems",
               ],
               product: "CBL Mariner 2.0 x64",
               vendor: "Microsoft",
               versions: [
                  {
                     status: "affected",
                     version: "N/A",
                  },
               ],
            },
            {
               cpes: [],
               platforms: [
                  "ARM64-based Systems",
               ],
               product: "CBL Mariner 2.0 ARM",
               vendor: "Microsoft",
               versions: [
                  {
                     status: "affected",
                     version: "N/A",
                  },
               ],
            },
            {
               cpes: [
                  "cpe:2.3:o:microsoft:cbl_mariner:1.0:*:*:*:*:*:*:x64",
               ],
               platforms: [
                  "x64-based Systems",
               ],
               product: "CBL Mariner 1.0 x64",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.1-1",
                     status: "affected",
                     version: "1.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               cpes: [
                  "cpe:2.3:o:microsoft:cbl_mariner:1.0:*:*:*:*:*:*:arm",
               ],
               platforms: [
                  "ARM64-based Systems",
               ],
               product: "CBL Mariner 1.0 ARM",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.1-1",
                     status: "affected",
                     version: "1.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               cpes: [
                  "cpe:2.3:a:microsoft:powershell:7.2:*:*:*:*:*:*:*",
               ],
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.1",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         datePublic: "2021-12-14T08:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: "Microsoft PowerShell Spoofing Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Spoofing",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-05-29T14:44:45.822Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43896",
            },
         ],
         title: "Microsoft PowerShell Spoofing Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2021-43896",
      datePublished: "2021-12-15T14:15:38",
      dateReserved: "2021-11-16T00:00:00",
      dateUpdated: "2024-08-04T04:10:17.045Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-21808
Vulnerability from cvelistv5
Published
2023-02-14 20:09
Modified
2025-02-28 21:13
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
.NET and Visual Studio Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808vendor-advisory
Impacted products
Vendor Product Version
Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Version: 16.11.0   < 16.11.24
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.19
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Version: 15.9.0   < 15.9.52
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.5
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.13
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2015 Update 3 Version: 14.0.0   < 14.0.27555.0
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2013 Update 5 Version: 12.0.0   < 12.0.40700.0
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.3
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.14
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.10
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 10.0.04614.06
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 10.0.04038.03
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04614.08
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.04614.05
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 10.0.09139.02
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04038.06
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 and 4.6.2 Version: 4.7.0   < 10.0.10240.19747
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T09:51:50.928Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET and Visual Studio Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-21808",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-28T20:23:13.694036Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-28T21:13:45.998Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "16.11.24",
                     status: "affected",
                     version: "16.11.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.19",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "15.9.52",
                     status: "affected",
                     version: "15.9.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.5",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.13",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2015 Update 3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "14.0.27555.0",
                     status: "affected",
                     version: "14.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2013 Update 5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "12.0.40700.0",
                     status: "affected",
                     version: "12.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.3",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.14",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.10",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows Server 2022",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows 10 Version 20H2 for ARM64-based Systems",
                  "Windows 10 Version 20H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows Server 2019",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows 10 Version 22H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.04614.06",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for ARM64-based Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows Server 2016",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.04038.03",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04614.08",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2012 R2 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04614.05",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022 (Server Core installation)",
                  "Windows Server 2022",
                  "Windows 10 Version 20H2 for 32-bit Systems",
                  "Windows 10 Version 20H2 for ARM64-based Systems",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.09139.02",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04038.06",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for 32-bit Systems",
                  "Windows 10 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 and 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.19747",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "16.11.24",
                           versionStartIncluding: "16.11.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.19",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "15.9.52",
                           versionStartIncluding: "15.9.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.5",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.13",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:update3:*:*:*:*:*:*",
                           versionEndExcluding: "14.0.27555.0",
                           versionStartIncluding: "14.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:update_5:*:*:*:*:*:*",
                           versionEndExcluding: "12.0.40700.0",
                           versionStartIncluding: "12.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.3",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.14",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.10",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.04614.06",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.04038.03",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04614.08",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04614.05",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.09139.02",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04038.06",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.19747",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-02-14T08:00:00.000Z",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET and Visual Studio Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-416",
                     description: "CWE-416: Use After Free",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T00:41:01.018Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET and Visual Studio Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808",
            },
         ],
         title: ".NET and Visual Studio Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-21808",
      datePublished: "2023-02-14T20:09:27.030Z",
      dateReserved: "2022-12-16T22:13:41.241Z",
      dateUpdated: "2025-02-28T21:13:45.998Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-28260
Vulnerability from cvelistv5
Published
2023-04-11 19:13
Modified
2025-01-23 01:05
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Summary
.NET DLL Hijacking Remote Code Execution Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28260vendor-advisory
Impacted products
Vendor Product Version
Microsoft .NET 6.0 Version: 6.0.0   < 6.0.16
 Create a notification for this product.
   Microsoft .NET 7.0 Version: 7.0.0   < 7.0.5
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.5 Version: 17.5.0   < 17.5.4
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.4 Version: 17.4.0   < 17.4.7
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.2 Version: 17.2.0   < 17.2.15
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.0 Version: 17.0.0   < 17.0.21
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.3.4
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.11
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T12:30:24.683Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET DLL Hijacking Remote Code Execution Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28260",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.16",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 7.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.0.5",
                     status: "affected",
                     version: "7.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.5.4",
                     status: "affected",
                     version: "17.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.4.7",
                     status: "affected",
                     version: "17.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.2.15",
                     status: "affected",
                     version: "17.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.0.21",
                     status: "affected",
                     version: "17.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.3.4",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.11",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.16",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.0.5",
                           versionStartIncluding: "7.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.5.4",
                           versionStartIncluding: "17.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.4.7",
                           versionStartIncluding: "17.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.2.15",
                           versionStartIncluding: "17.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.0.21",
                           versionStartIncluding: "17.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.3.4",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.11",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-04-11T07:00:00.000Z",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET DLL Hijacking Remote Code Execution Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Remote Code Execution",
                     lang: "en-US",
                     type: "Impact",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-23T01:05:17.536Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET DLL Hijacking Remote Code Execution Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28260",
            },
         ],
         title: ".NET DLL Hijacking Remote Code Execution Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-28260",
      datePublished: "2023-04-11T19:13:56.662Z",
      dateReserved: "2023-03-13T22:18:32.391Z",
      dateUpdated: "2025-01-23T01:05:17.536Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-43485
Vulnerability from cvelistv5
Published
2024-10-08 17:35
Modified
2025-01-29 23:51
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Summary
.NET and Visual Studio Denial of Service Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43485vendor-advisory
Impacted products
Vendor Product Version
Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.24
 Create a notification for this product.
   Microsoft PowerShell 7.4 Version: 7.4.0   < 7.4.6
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.20
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.8 Version: 17.8.0   < 17.8.15
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.10 Version: 17.10   < 17.10.8
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.11 Version: 17.11   < 17.11.5
 Create a notification for this product.
   Microsoft PowerShell 7.5 Version: 7.5.0   < 7.5.0
 Create a notification for this product.
   Microsoft .NET 8.0 Version: 8.0.0   < 8.0.10
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.35
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-43485",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-08T18:54:45.795602Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-09T19:47:57.831Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.24",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.4.6",
                     status: "affected",
                     version: "7.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.20",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.8.15",
                     status: "affected",
                     version: "17.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.10",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.10.8",
                     status: "affected",
                     version: "17.10",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.11",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.11.5",
                     status: "affected",
                     version: "17.11",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.5.0",
                     status: "affected",
                     version: "7.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 8.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "8.0.10",
                     status: "affected",
                     version: "8.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.35",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.24",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.4.6",
                           versionStartIncluding: "7.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.20",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.8.15",
                           versionStartIncluding: "17.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.10.8",
                           versionStartIncluding: "17.10",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.11.5",
                           versionStartIncluding: "17.11",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.5.0",
                           versionStartIncluding: "7.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "8.0.10",
                           versionStartIncluding: "8.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.35",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2024-10-08T07:00:00.000Z",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET and Visual Studio Denial of Service Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-407",
                     description: "CWE-407: Inefficient Algorithmic Complexity",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-29T23:51:09.897Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET and Visual Studio Denial of Service Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43485",
            },
         ],
         title: ".NET and Visual Studio Denial of Service Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2024-43485",
      datePublished: "2024-10-08T17:35:47.290Z",
      dateReserved: "2024-08-14T01:08:33.518Z",
      dateUpdated: "2025-01-29T23:51:09.897Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-36013
Vulnerability from cvelistv5
Published
2023-11-20 16:02
Modified
2025-01-01 02:16
Severity ?
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Summary
PowerShell Information Disclosure Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36013vendor-advisory
Impacted products
Vendor Product Version
Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.17
 Create a notification for this product.
   Microsoft PowerShell 7.3 Version: 7.3.0   < 7.3.10
 Create a notification for this product.
   Microsoft PowerShell 7.4 Version: 7.4.0   < 7.4.0
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T16:37:41.179Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "PowerShell Information Disclosure Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36013",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.17",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.3",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.3.10",
                     status: "affected",
                     version: "7.3.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.4.0",
                     status: "affected",
                     version: "7.4.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.17",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.3.10",
                           versionStartIncluding: "7.3.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.4.0",
                           versionStartIncluding: "7.4.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-11-17T08:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: "PowerShell Information Disclosure Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-798",
                     description: "CWE-798: Use of Hard-coded Credentials",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T02:16:27.059Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: "PowerShell Information Disclosure Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36013",
            },
         ],
         title: "PowerShell Information Disclosure Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-36013",
      datePublished: "2023-11-20T16:02:37.051Z",
      dateReserved: "2023-06-20T20:44:39.822Z",
      dateUpdated: "2025-01-01T02:16:27.059Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-43483
Vulnerability from cvelistv5
Published
2024-10-08 17:35
Modified
2025-01-29 23:50
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Summary
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43483vendor-advisory
Impacted products
Vendor Product Version
Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.24
 Create a notification for this product.
   Microsoft PowerShell 7.4 Version: 7.4.0   < 7.4.6
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.6 Version: 17.6.0   < 17.6.20
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.8 Version: 17.8.0   < 17.8.15
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.10 Version: 17.10   < 17.10.8
 Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.11 Version: 17.11   < 17.11.5
 Create a notification for this product.
   Microsoft .NET 8.0 Version: 8.0.0   < 8.0.10
 Create a notification for this product.
   Microsoft .NET 6.0 Version: 6.0.0   < 6.0.35
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.8 Version: 4.8.0   < 4.8.04762.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8 Version: 4.8.0   < 4.8.04762.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Version: 4.7.0   < 4.7.04115.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Version: 4.7.0   < 4.7.04115.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 Version: 4.8.1   < 4.8.1.9277.03
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6.2 Version: 4.7.0   < 4.7.04115.01
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 4.6/4.6.2 Version: 10.0.0.0   < 10.0.10240.20796
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 2.0 Service Pack 2 Version: 2.0.0   < 3.0.30729.8974
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.0 Service Pack 2 Version: 3.0.0   < 3.0.30729.8974
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5 Version: 3.5.0   < 3.5.30729.8973
 Create a notification for this product.
   Microsoft Microsoft .NET Framework 3.5.1 Version: 3.5.0   < 3.5.1.30729.8974
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-43483",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-08T18:54:49.591134Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-09T19:48:38.422Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.24",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.4",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.4.6",
                     status: "affected",
                     version: "7.4.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.6",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.6.20",
                     status: "affected",
                     version: "17.6.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.8.15",
                     status: "affected",
                     version: "17.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.10",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.10.8",
                     status: "affected",
                     version: "17.10",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "Microsoft Visual Studio 2022 version 17.11",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "17.11.5",
                     status: "affected",
                     version: "17.11",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 8.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "8.0.10",
                     status: "affected",
                     version: "8.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.35",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1607 for 32-bit Systems",
                  "Windows 10 Version 1607 for x64-based Systems",
                  "Windows Server 2016",
                  "Windows Server 2016 (Server Core installation)",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04762.01",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.04762.01",
                     status: "affected",
                     version: "4.8.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 Version 1809 for 32-bit Systems",
                  "Windows 10 Version 1809 for x64-based Systems",
                  "Windows Server 2019",
                  "Windows Server 2019 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04115.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04115.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2022",
                  "Windows Server 2022 (Server Core installation)",
                  "Windows 11 version 21H2 for x64-based Systems",
                  "Windows 11 version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for 32-bit Systems",
                  "Windows 10 Version 21H2 for ARM64-based Systems",
                  "Windows 10 Version 21H2 for x64-based Systems",
                  "Windows 11 Version 22H2 for ARM64-based Systems",
                  "Windows 11 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for x64-based Systems",
                  "Windows 10 Version 22H2 for ARM64-based Systems",
                  "Windows 10 Version 22H2 for 32-bit Systems",
                  "Windows 11 Version 23H2 for ARM64-based Systems",
                  "Windows 11 Version 23H2 for x64-based Systems",
                  "Windows Server 2022, 23H2 Edition (Server Core installation)",
                  "Windows 11 Version 24H2 for ARM64-based Systems",
                  "Windows 11 Version 24H2 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 3.5 AND 4.8.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.8.1.9277.03",
                     status: "affected",
                     version: "4.8.1",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "4.7.04115.01",
                     status: "affected",
                     version: "4.7.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows 10 for 32-bit Systems",
                  "Windows 10 for x64-based Systems",
               ],
               product: "Microsoft .NET Framework 4.6/4.6.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "10.0.10240.20796",
                     status: "affected",
                     version: "10.0.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 2.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8974",
                     status: "affected",
                     version: "2.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
               ],
               product: "Microsoft .NET Framework 3.0 Service Pack 2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.0.30729.8974",
                     status: "affected",
                     version: "3.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 for 32-bit Systems Service Pack 2",
                  "Windows Server 2008 for x64-based Systems Service Pack 2",
                  "Windows Server 2012",
                  "Windows Server 2012 (Server Core installation)",
                  "Windows Server 2012 R2",
                  "Windows Server 2012 R2 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.5.30729.8973",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
                  "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
               ],
               product: "Microsoft .NET Framework 3.5.1",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "3.5.1.30729.8974",
                     status: "affected",
                     version: "3.5.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.24",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
                           versionEndExcluding: "7.4.6",
                           versionStartIncluding: "7.4.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.6.20",
                           versionStartIncluding: "17.6.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.8.15",
                           versionStartIncluding: "17.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.10.8",
                           versionStartIncluding: "17.10",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "17.11.5",
                           versionStartIncluding: "17.11",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "8.0.10",
                           versionStartIncluding: "8.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.35",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04762.01",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.04762.01",
                           versionStartIncluding: "4.8.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04115.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04115.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.8.1.9277.03",
                           versionStartIncluding: "4.8.1",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "4.7.04115.01",
                           versionStartIncluding: "4.7.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "10.0.10240.20796",
                           versionStartIncluding: "10.0.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8974",
                           versionStartIncluding: "2.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
                           versionEndExcluding: "3.0.30729.8974",
                           versionStartIncluding: "3.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.5.30729.8973",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "3.5.1.30729.8974",
                           versionStartIncluding: "3.5.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2024-10-08T07:00:00.000Z",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-407",
                     description: "CWE-407: Inefficient Algorithmic Complexity",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-29T23:50:32.813Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43483",
            },
         ],
         title: ".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2024-43483",
      datePublished: "2024-10-08T17:35:46.198Z",
      dateReserved: "2024-08-14T01:08:33.518Z",
      dateUpdated: "2025-01-29T23:50:32.813Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-21538
Vulnerability from cvelistv5
Published
2023-01-10 00:00
Modified
2025-01-01 00:35
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Summary
.NET Denial of Service Vulnerability
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21538vendor-advisory
Impacted products
Vendor Product Version
Microsoft .NET 6.0 Version: 6.0.0   < 6.0.13
 Create a notification for this product.
   Microsoft PowerShell 7.2 Version: 7.2.0   < 7.2.9
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-21538",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-16T22:02:43.243536Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-16T22:02:48.609Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T09:44:01.057Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: ".NET Denial of Service Vulnerability",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21538",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "Unknown",
               ],
               product: ".NET 6.0",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "6.0.13",
                     status: "affected",
                     version: "6.0.0",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "Unknown",
               ],
               product: "PowerShell 7.2",
               vendor: "Microsoft",
               versions: [
                  {
                     lessThan: "7.2.9",
                     status: "affected",
                     version: "7.2.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         cpeApplicability: [
            {
               nodes: [
                  {
                     cpeMatch: [
                        {
                           criteria: "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "6.0.13",
                           versionStartIncluding: "6.0.0",
                           vulnerable: true,
                        },
                        {
                           criteria: "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                           versionEndExcluding: "7.2.9",
                           versionStartIncluding: "7.2.0",
                           vulnerable: true,
                        },
                     ],
                     negate: false,
                     operator: "OR",
                  },
               ],
            },
         ],
         datePublic: "2023-01-10T08:00:00+00:00",
         descriptions: [
            {
               lang: "en-US",
               value: ".NET Denial of Service Vulnerability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en-US",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-502",
                     description: "CWE-502: Deserialization of Untrusted Data",
                     lang: "en-US",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-01T00:35:32.962Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: ".NET Denial of Service Vulnerability",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21538",
            },
         ],
         title: ".NET Denial of Service Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2023-21538",
      datePublished: "2023-01-10T00:00:00",
      dateReserved: "2022-12-01T00:00:00",
      dateUpdated: "2025-01-01T00:35:32.962Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}