Skip to content
Sign in
CVE-2023-249367.5High

CVE-2023-24936: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Microsoft · Microsoft Visual Studio 2022 version 17.2

Vendor fix available · Affected: Microsoft Visual Studio 2022 version 17.2 · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.6%probability of exploitation in the next 30 days
75th percentile
050100

Higher than 75% of scored CVEs

7.5HighCVSS 3.1
LowHigh

DescriptionCVE.org

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Microsoft · Microsoft Visual Studio 2022 version 17.2from 17.2.0 before 17.2.16
  • Microsoft · Microsoft Visual Studio 2022 version 17.0from 17.0.0 before 17.0.22
  • Microsoft · Microsoft Visual Studio 2022 version 17.4from 17.4.0 before 17.4.8
  • Microsoft · .NET 6.0from 6.0.0 before 6.0.18
  • Microsoft · .NET 7.0from 7.0.0 before 7.0.7
  • Microsoft · Microsoft Visual Studio 2022 version 17.6from 17.6.0 before 17.6.3
  • Microsoft · PowerShell 7.2from 7.2.0 before 7.2.12
  • Microsoft · PowerShell 7.3from 7.3.0 before 7.3.5
  • Microsoft · Microsoft .NET Framework 4.8from 4.8.0 before 4.8.4644.0
  • Microsoft · Microsoft .NET Framework 3.5 AND 4.8from 4.8.0 before 4.8.4644.0
  • Microsoft · Microsoft .NET Framework 3.5 AND 4.7.2from 4.7.0 before 4.7.4050.0
  • Microsoft · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2from 3.0.0.0 before 10.0.14393.5989
  • Microsoft · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2from 4.7.0 before 4.7.04043.0
  • Microsoft · Microsoft .NET Framework 3.5 AND 4.8.1from 4.8.1 before 4.8.9166.0
  • Microsoft · Microsoft .NET Framework 4.6.2from 4.7.0 before 4.7.04043.0
  • Microsoft · Microsoft .NET Framework 3.5 and 4.6.2from 4.7.0 before 10.0.10240.19983
  • Microsoft · Microsoft .NET Framework 2.0 Service Pack 2from 2.0.0 before 3.0.6920.8954; 2.0.50727.8970
  • Microsoft · Microsoft .NET Framework 3.0 Service Pack 2from 3.0.0 before 3.0.6920.8954; 2.0.50727.8970
  • Microsoft · Microsoft .NET Framework 3.5.1from 3.5.0 before 3.0.6920.8954; 2.0.50727.8970
  • Microsoft · Microsoft .NET Framework 3.5from 3.5.0 before 3.0.6920.8954; 2.0.50727.8970

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Microsoft
Published
June 2023
Band
Possible (1 to 10%), June 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-24936 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in