p PatchFirst

CVE-2023-35390

CVE-2023-35390 · .NET and Visual Studio Remote Code Execution Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 7.8 · High · EPSS 2.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • .net 6.0

    Versions
    • ≥ 6.0.0, < 6.0.21: Affected (custom)

    Update to 6.0.21

  • .net 7.0

    Versions
    • ≥ 7.0.0, < 7.0.10: Affected (custom)

    Update to 7.0.10

  • microsoft visual studio 2022 version 17.2

    Versions
    • ≥ 17.2.0, < 17.2.18: Affected (custom)

    Update to 17.2.18

  • microsoft visual studio 2022 version 17.4

    Versions
    • ≥ 17.4.0, < 17.4.10: Affected (custom)

    Update to 17.4.10

  • microsoft visual studio 2022 version 17.6

    Versions
    • ≥ 17.6.0, < 17.6.6: Affected (custom)

    Update to 17.6.6

  • dotnet6 Ubuntu:22.04:LTS

    Versions
    • 6.0.108-0ubuntu1~22.04.1
    • 6.0.109-0ubuntu1~22.04.1
    • 6.0.110-0ubuntu1~22.04.1
    • 6.0.111-0ubuntu1~22.04.1
    • 6.0.113-0ubuntu1~22.04.1
    • 6.0.116-0ubuntu1~22.04.1
    • 6.0.118-0ubuntu1~22.04.1
    • 6.0.119-0ubuntu1~22.04.1
    • 6.0.120-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 6.0.121-0ubuntu1~22.04.1

    Update to 6.0.121-0ubuntu1~22.04.1

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    • 7.0.109-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 7.0.110-0ubuntu1~22.04.1

    Update to 7.0.110-0ubuntu1~22.04.1

Original sources

Check your server →