Lucene search

MicrosoftCVE-2023-24895

HistoryJun 14, 2023 - 3:15 p.m.

CVE-2023-24895

2023-06-1415:15:09

microsoft

web.nvd.nist.gov

108

.net

.net framework

visual studio

remote code execution

vulnerability

cve-2023-24895

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

52.1%

JSON

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Affected configurations

Nvd

Vulners

Node

microsoftwindows_10_1607Match-x64

microsoftwindows_10_1607Match-x86

microsoftwindows_server_2008Matchr2sp1x64

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Matchr2

microsoftwindows_server_2016Match-

AND

microsoft.net_frameworkMatch4.8

Node

microsoftwindows_server_2008Matchr2sp1x64

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Matchr2

AND

microsoft.net_frameworkMatch4.6.2

microsoft.net_frameworkMatch4.7

microsoft.net_frameworkMatch4.7.1

microsoft.net_frameworkMatch4.7.2

Node

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_server_2008Match-sp2x86

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Matchr2

AND

microsoft.net_frameworkMatch4.6.2

Node

microsoftwindows_server_2008Matchr2sp1x64

AND

microsoft.net_frameworkMatch3.5.1

Node

microsoftwindows_10_1507Match-x64

microsoftwindows_10_1507Match-x86

AND

microsoft.net_frameworkMatch3.5

microsoft.net_frameworkMatch4.6.2

Node

microsoftwindows_10_1607Match-x64

microsoftwindows_10_1607Match-x86

microsoftwindows_10_21h2Match-arm64

microsoftwindows_10_21h2Match-x64

microsoftwindows_10_21h2Match-x86

microsoftwindows_10_22h2Match-arm64

microsoftwindows_10_22h2Match-x64

microsoftwindows_10_22h2Match-x86

microsoftwindows_11_21h2Match-arm64

microsoftwindows_11_21h2Match-x64

microsoftwindows_11_22h2Match-arm64

microsoftwindows_11_22h2Match-x64

microsoftwindows_server_2022Match-

AND

microsoft.net_frameworkMatch3.5

microsoft.net_frameworkMatch4.8.1

Node

microsoft.net_frameworkMatch3.5

microsoft.net_frameworkMatch4.8

AND

microsoftwindows_10_1607Match-x64

microsoftwindows_10_1607Match-x86

microsoftwindows_10_1809Match-x64

microsoftwindows_10_1809Match-x86

microsoftwindows_10_21h2Match-arm64

microsoftwindows_10_21h2Match-x64

microsoftwindows_10_21h2Match-x86

microsoftwindows_10_22h2Match-arm64

microsoftwindows_10_22h2Match-x64

microsoftwindows_10_22h2Match-x86

microsoftwindows_11_21h2Match-arm64

microsoftwindows_11_21h2Match-x64

microsoftwindows_11_22h2Match-arm64

microsoftwindows_11_22h2Match-x64

microsoftwindows_server_2019Match-

microsoftwindows_server_2022Match-

Node

microsoft.net_frameworkMatch3.5

microsoft.net_frameworkMatch4.7.2

AND

microsoftwindows_10_1809Match-x64

microsoftwindows_10_1809Match-x86

microsoftwindows_server_2019Match-

Node

microsoft.net_frameworkMatch3.5

microsoft.net_frameworkMatch4.6.2

microsoft.net_frameworkMatch4.7

microsoft.net_frameworkMatch4.7.1

microsoft.net_frameworkMatch4.7.2

AND

microsoftwindows_10_1607Match-x64

microsoftwindows_10_1607Match-x86

microsoftwindows_server_2016Match-

Node

microsoft.net_frameworkMatch3.5

AND

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Matchr2

Node

microsoft.net_frameworkMatch3.0sp2

AND

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_server_2008Match-sp2x86

Node

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_server_2008Match-sp2x86

AND

microsoft.net_frameworkMatch2.0sp2

Node

microsoft.netMatch6.0.0-

microsoft.netMatch7.0.0

Node

microsoftvisual_studio_2022Range17.0–17.0.22

microsoftvisual_studio_2022Range17.2–17.2.16

microsoftvisual_studio_2022Range17.4–17.4.8

microsoftvisual_studio_2022Range17.6–17.6.3

VendorProductVersionCPE
microsoftwindows_10_1607-cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*
microsoftwindows_10_1607-cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
microsoftwindows_server_2012-cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
microsoftwindows_server_2012r2cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
microsoftwindows_server_2016-cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
microsoft.net_framework4.8cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*
microsoft.net_framework4.6.2cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
microsoft.net_framework4.7cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
microsoft.net_framework4.7.1cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_10_1607	-	cpe:2.3:o:microsoft:windows_10_1607:-::::::x64:
microsoft	windows_10_1607	-	cpe:2.3:o:microsoft:windows_10_1607:-::::::x86:
microsoft	windows_server_2008	r2	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
microsoft	windows_server_2012	-	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
microsoft	windows_server_2012	r2	cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*
microsoft	windows_server_2016	-	cpe:2.3:o:microsoft:windows_server_2016:-:::::::*
microsoft	.net_framework	4.8	cpe:2.3:a:microsoft:.net_framework:4.8:::::::*
microsoft	.net_framework	4.6.2	cpe:2.3:a:microsoft:.net_framework:4.6.2:::::::*
microsoft	.net_framework	4.7	cpe:2.3:a:microsoft:.net_framework:4.7:::::::*
microsoft	.net_framework	4.7.1	cpe:2.3:a:microsoft:.net_framework:4.7.1:::::::*

Rows per page:

1-10 of 371

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": ".NET 7.0",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:7.0.0:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "7.0.0",
        "lessThan": "7.0.7",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.0",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2022:17.0:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.0.0",
        "lessThan": "17.0.22",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.2",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.2.0",
        "lessThan": "17.2.16",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.4",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2022:17.4:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.4.0",
        "lessThan": "17.4.8",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.6",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio:2022:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.6.0",
        "lessThan": "17.6.3",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "PowerShell 7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:powershell:7.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "7.2.0",
        "lessThan": "7.2.12",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "PowerShell 7.3",
    "cpes": [
      "cpe:2.3:a:microsoft:powershell:7.3:-:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "7.3.0",
        "lessThan": "7.3.5",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.8",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2012 (Server Core installation)",
      "Windows Server 2016",
      "Windows 10 Version 1607 for 32-bit Systems",
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "Windows Server 2012 R2 (Server Core installation)",
      "Windows Server 2012",
      "Windows 10 Version 1607 for x64-based Systems",
      "Windows Server 2016 (Server Core installation)",
      "Windows Server 2012 R2"
    ],
    "versions": [
      {
        "version": "4.8.0",
        "lessThan": "4.8.4644.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 AND 4.8",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 Version 1809 for 32-bit Systems",
      "Windows Server 2019",
      "Windows Server 2022 (Server Core installation)",
      "Windows Server 2019 (Server Core installation)",
      "Windows 10 Version 1809 for x64-based Systems",
      "Windows Server 2022",
      "Windows 11 version 21H2 for x64-based Systems",
      "Windows 11 version 21H2 for ARM64-based Systems",
      "Windows 10 Version 21H2 for 32-bit Systems",
      "Windows 10 Version 21H2 for ARM64-based Systems",
      "Windows 10 Version 21H2 for x64-based Systems",
      "Windows 10 Version 22H2 for x64-based Systems",
      "Windows 10 Version 22H2 for 32-bit Systems",
      "Windows 10 Version 22H2 for ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "4.8.0",
        "lessThan": "4.8.4644.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 Version 1809 for 32-bit Systems",
      "Windows 10 Version 1809 for x64-based Systems",
      "Windows 10 Version 1809 for ARM64-based Systems",
      "Windows Server 2019",
      "Windows Server 2019 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "4.7.0",
        "lessThan": "4.7.4050.0",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "4.8.4644.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 Version 1607 for 32-bit Systems",
      "Windows 10 Version 1607 for x64-based Systems",
      "Windows Server 2016",
      "Windows Server 2016 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "3.0.0.0",
        "lessThan": "10.0.14393.5989",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "Windows Server 2012",
      "Windows Server 2012 R2 (Server Core installation)",
      "Windows Server 2012 (Server Core installation)",
      "Windows Server 2012 R2"
    ],
    "versions": [
      {
        "version": "4.7.0",
        "lessThan": "4.7.04043.0",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "4.7.4050.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 AND 4.8.1",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2022",
      "Windows Server 2022 (Server Core installation)",
      "Windows 11 version 21H2 for x64-based Systems",
      "Windows 11 version 21H2 for ARM64-based Systems",
      "Windows 10 Version 21H2 for 32-bit Systems",
      "Windows 10 Version 21H2 for ARM64-based Systems",
      "Windows 10 Version 21H2 for x64-based Systems",
      "Windows 11 Version 22H2 for ARM64-based Systems",
      "Windows 11 Version 22H2 for x64-based Systems",
      "Windows 10 Version 22H2 for x64-based Systems",
      "Windows 10 Version 22H2 for ARM64-based Systems",
      "Windows 10 Version 22H2 for 32-bit Systems"
    ],
    "versions": [
      {
        "version": "4.8.1",
        "lessThan": "4.8.9166.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.6.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
      "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
      "Windows Server 2008 for x64-based Systems Service Pack 2"
    ],
    "versions": [
      {
        "version": "4.7.0",
        "lessThan": "4.7.04043.0",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "4.7.4050.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 and 4.6.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 for 32-bit Systems",
      "Windows 10 for x64-based Systems"
    ],
    "versions": [
      {
        "version": "4.7.0",
        "lessThan": "10.0.10240.19983",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 2.0 Service Pack 2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:2.0:sp2:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "Windows Server 2008 for x64-based Systems Service Pack 2"
    ],
    "versions": [
      {
        "version": "2.0.0",
        "lessThan": "3.0.6920.8954; 2.0.50727.8970",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "2.0.0",
        "lessThan": "4.7.4050.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.0 Service Pack 2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:3.0:sp2:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "Windows Server 2008 for x64-based Systems Service Pack 2"
    ],
    "versions": [
      {
        "version": "3.0.0",
        "lessThan": "3.0.6920.8954; 2.0.50727.8970",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "3.0.0",
        "lessThan": "4.7.4050.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:3.5:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2012",
      "Windows Server 2012 (Server Core installation)",
      "Windows Server 2012 R2",
      "Windows Server 2012 R2 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "3.5.0",
        "lessThan": "3.0.6920.8954; 2.0.50727.8970",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5.1",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:3.5.1:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "3.5.0",
        "lessThan": "3.0.6920.8954; 2.0.50727.8970",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]