CVE-2023-36049
CVE-2023-36049 · .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVSS 7.6 · High · EPSS 6.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
microsoft visual studio 2022 version 17.2
- Versions
- ≥ 17.2.0, < 17.2.22: Affected (custom)
Update to 17.2.22
microsoft visual studio 2022 version 17.4
- Versions
- ≥ 17.4.0, < 17.4.14: Affected (custom)
Update to 17.4.14
microsoft visual studio 2022 version 17.7
- Versions
- ≥ 17.7.0, < 17.7.7: Affected (custom)
Update to 17.7.7
microsoft visual studio 2022 version 17.6
- Versions
- ≥ 17.6.0, < 17.6.10: Affected (custom)
Update to 17.6.10
.net 8.0
- Versions
- ≥ 8.0, < 8.0.0: Affected (custom)
No fix published
.net 6.0
- Versions
- ≥ 6.0.0, < 6.0.25: Affected (custom)
Update to 6.0.25
.net 7.0
- Versions
- ≥ 7.0.0, < 7.0.14: Affected (custom)
Update to 7.0.14
microsoft .net framework 3.5 and 4.8.1
- Versions
- ≥ 4.8.1, < 4.8.9206.0: Affected (custom)
Update to 4.8.9206.0
microsoft .net framework 4.8
- Versions
- ≥ 4.8.0, < 4.8.4682.0: Affected (custom)
Update to 4.8.4682.0
microsoft .net framework 3.5 and 4.8
- Versions
- ≥ 4.8.0, < 4.8.4682.0: Affected (custom)
Update to 4.8.4682.0
microsoft .net framework 3.5 and 4.7.2
- Versions
- ≥ 4.7.0, < 4.7.4076.0: Affected (custom)
Update to 4.7.4076.0
microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 3.0.0.0, < 10.0.14393.6452: Affected (custom)
Update to 10.0.14393.6452
microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 4.7.0, < 4.7.4076.0: Affected (custom)
Update to 4.7.4076.0
microsoft .net framework 4.6.2
- Versions
- ≥ 4.7.0, < 4.7.4076.0: Affected (custom)
Update to 4.7.4076.0
microsoft .net framework 3.5 and 4.6/4.6.2
- Versions
- ≥ 10.0.0, < 10.0.10240.20308: Affected (custom)
Update to 10.0.10240.20308
microsoft .net framework 2.0 service pack 2
- Versions
- ≥ 2.0.0, < 3.0.50727.8975: Affected (custom)
Update to 3.0.50727.8975
microsoft .net framework 3.0 service pack 2
- Versions
- ≥ 3.0.0, < 3.0.50727.8975: Affected (custom)
Update to 3.0.50727.8975
microsoft .net framework 3.5
- Versions
- ≥ 3.5.0, < 3.0.50727.8975: Affected (custom)
No fix published
microsoft .net framework 3.5.1
- Versions
- ≥ 3.5.0, < 3.0.50727.8975: Affected (custom)
No fix published
dotnet6 Ubuntu:22.04:LTS
- Versions
- 6.0.108-0ubuntu1~22.04.1
- 6.0.109-0ubuntu1~22.04.1
- 6.0.110-0ubuntu1~22.04.1
- 6.0.111-0ubuntu1~22.04.1
- 6.0.113-0ubuntu1~22.04.1
- 6.0.116-0ubuntu1~22.04.1
- 6.0.118-0ubuntu1~22.04.1
- 6.0.119-0ubuntu1~22.04.1
- 6.0.120-0ubuntu1~22.04.1
- 6.0.121-0ubuntu1~22.04.1
- 6.0.122-0ubuntu1~22.04.1
- 6.0.123-0ubuntu1~22.04.1
- 6.0.124-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: < 6.0.125-0ubuntu1~22.04.1
Update to 6.0.125-0ubuntu1~22.04.1
dotnet7 Ubuntu:22.04:LTS
- Versions
- 7.0.105-0ubuntu1~22.04.1
- 7.0.107-0ubuntu1~22.04.1
- 7.0.108-0ubuntu1~22.04.1
- 7.0.109-0ubuntu1~22.04.1
- 7.0.110-0ubuntu1~22.04.1
- 7.0.111-0ubuntu1~22.04.1
- 7.0.112-0ubuntu1~22.04.1
- 7.0.113-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: < 7.0.114-0ubuntu1~22.04.1
Update to 7.0.114-0ubuntu1~22.04.1