CVE-2023-24936
CVE-2023-24936 · .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVSS 7.5 · High · EPSS 1.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
microsoft visual studio 2022 version 17.2
- Versions
- ≥ 17.2.0, < 17.2.16: Affected (custom)
Update to 17.2.16
microsoft visual studio 2022 version 17.0
- Versions
- ≥ 17.0.0, < 17.0.22: Affected (custom)
Update to 17.0.22
microsoft visual studio 2022 version 17.4
- Versions
- ≥ 17.4.0, < 17.4.8: Affected (custom)
Update to 17.4.8
.net 6.0
- Versions
- ≥ 6.0.0, < 6.0.18: Affected (custom)
Update to 6.0.18
.net 7.0
- Versions
- ≥ 7.0.0, < 7.0.7: Affected (custom)
Update to 7.0.7
microsoft visual studio 2022 version 17.6
- Versions
- ≥ 17.6.0, < 17.6.3: Affected (custom)
Update to 17.6.3
powershell 7.2
- Versions
- ≥ 7.2.0, < 7.2.12: Affected (custom)
Update to 7.2.12
powershell 7.3
- Versions
- ≥ 7.3.0, < 7.3.5: Affected (custom)
Update to 7.3.5
microsoft .net framework 4.8
- Versions
- ≥ 4.8.0, < 4.8.4644.0: Affected (custom)
Update to 4.8.4644.0
microsoft .net framework 3.5 and 4.8
- Versions
- ≥ 4.8.0, < 4.8.4644.0: Affected (custom)
Update to 4.8.4644.0
microsoft .net framework 3.5 and 4.7.2
- Versions
- ≥ 4.7.0, < 4.7.4050.0: Affected (custom)
Update to 4.7.4050.0
microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 3.0.0.0, < 10.0.14393.5989: Affected (custom)
Update to 10.0.14393.5989
microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 4.7.0, < 4.7.04043.0: Affected (custom)
Update to 4.7.04043.0
microsoft .net framework 3.5 and 4.8.1
- Versions
- ≥ 4.8.1, < 4.8.9166.0: Affected (custom)
Update to 4.8.9166.0
microsoft .net framework 4.6.2
- Versions
- ≥ 4.7.0, < 4.7.04043.0: Affected (custom)
Update to 4.7.04043.0
microsoft .net framework 3.5 and 4.6.2
- Versions
- ≥ 4.7.0, < 10.0.10240.19983: Affected (custom)
Update to 10.0.10240.19983
microsoft .net framework 2.0 service pack 2
- Versions
- ≥ 2.0.0, < 3.0.6920.8954; 2.0.50727.8970: Affected (custom)
Update to 3.0.6920.8954; 2.0.50727.8970
microsoft .net framework 3.0 service pack 2
- Versions
- ≥ 3.0.0, < 3.0.6920.8954; 2.0.50727.8970: Affected (custom)
Update to 3.0.6920.8954; 2.0.50727.8970
microsoft .net framework 3.5.1
- Versions
- ≥ 3.5.0, < 3.0.6920.8954; 2.0.50727.8970: Affected (custom)
No fix published
microsoft .net framework 3.5
- Versions
- ≥ 3.5.0, < 3.0.6920.8954; 2.0.50727.8970: Affected (custom)
No fix published
dotnet6 Ubuntu:22.04:LTS
- Versions
- 6.0.108-0ubuntu1~22.04.1
- 6.0.109-0ubuntu1~22.04.1
- 6.0.110-0ubuntu1~22.04.1
- 6.0.111-0ubuntu1~22.04.1
- 6.0.113-0ubuntu1~22.04.1
- 6.0.116-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: < 6.0.118-0ubuntu1~22.04.1
Update to 6.0.118-0ubuntu1~22.04.1
dotnet7 Ubuntu:22.04:LTS
- Versions
- 7.0.105-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: < 7.0.107-0ubuntu1~22.04.1
Update to 7.0.107-0ubuntu1~22.04.1