CVE-2023-28260

CVE-2023-28260 · .NET DLL Hijacking Remote Code Execution Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

.NET DLL Hijacking Remote Code Execution Vulnerability

CVSS 7.8 · High · EPSS 1.5% · Fix available

Stack: system

Affected products and versions

.net 6.0
Versions
- ≥ 6.0.0, < 6.0.16: Affected (custom)
Update to 6.0.16
.net 7.0
Versions
- ≥ 7.0.0, < 7.0.5: Affected (custom)
Update to 7.0.5
microsoft visual studio 2022 version 17.5
Versions
- ≥ 17.5.0, < 17.5.4: Affected (custom)
Update to 17.5.4
microsoft visual studio 2022 version 17.4
Versions
- ≥ 17.4.0, < 17.4.7: Affected (custom)
Update to 17.4.7
microsoft visual studio 2022 version 17.2
Versions
- ≥ 17.2.0, < 17.2.15: Affected (custom)
Update to 17.2.15
microsoft visual studio 2022 version 17.0
Versions
- ≥ 17.0.0, < 17.0.21: Affected (custom)
Update to 17.0.21
powershell 7.3
Versions
- ≥ 7.3.0, < 7.3.4: Affected (custom)
Update to 7.3.4
powershell 7.2
Versions
- ≥ 7.2.0, < 7.2.11: Affected (custom)
Update to 7.2.11
dotnet6 Ubuntu:22.04:LTS
Versions
- 6.0.108-0ubuntu1~22.04.1
- 6.0.109-0ubuntu1~22.04.1
- 6.0.110-0ubuntu1~22.04.1
- 6.0.111-0ubuntu1~22.04.1
- 6.0.113-0ubuntu1~22.04.1
Affected ranges
- ECOSYSTEM: < 6.0.116-0ubuntu1~22.04.1
Update to 6.0.116-0ubuntu1~22.04.1