Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-24936
HistoryJun 14, 2023 - 3:15 p.m.

CVE-2023-24936

2023-06-1415:15:09
[email protected]
web.nvd.nist.gov
cve-2023-24936
.net
visual studio
elevation of privilege

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%

JSON

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Affected configurations

NVD
Node
microsoft.net_frameworkMatch4.8
AND
microsoftwindows_10_1607Match-x64
OR
microsoftwindows_10_1607Match-x86
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_server_2016Match-
Node
microsoft.net_frameworkMatch4.6.2
OR
microsoft.net_frameworkMatch4.7
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
AND
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
Node
microsoft.net_frameworkMatch4.6.2
AND
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
Node
microsoft.net_frameworkMatch3.5.1
AND
microsoftwindows_server_2008Matchr2sp1x64
Node
microsoftwindows_10_1507Match-x64
OR
microsoftwindows_10_1507Match-x86
AND
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.6.2
Node
microsoftwindows_10_1607Match-x64
OR
microsoftwindows_10_1607Match-x86
OR
microsoftwindows_10_21h2Match-arm64
OR
microsoftwindows_10_21h2Match-x64
OR
microsoftwindows_10_21h2Match-x86
OR
microsoftwindows_10_22h2Match-arm64
OR
microsoftwindows_10_22h2Match-x64
OR
microsoftwindows_10_22h2Match-x86
OR
microsoftwindows_11_21h2Match-arm64
OR
microsoftwindows_11_21h2Match-x64
OR
microsoftwindows_11_22h2Match-arm64
OR
microsoftwindows_11_22h2Match-x64
OR
microsoftwindows_server_2022Match-
AND
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.8.1
Node
microsoftwindows_10_1607Match-x64
OR
microsoftwindows_10_1607Match-x86
OR
microsoftwindows_10_1809Match-x64
OR
microsoftwindows_10_1809Match-x86
OR
microsoftwindows_10_21h2Match-arm64
OR
microsoftwindows_10_21h2Match-x64
OR
microsoftwindows_10_21h2Match-x86
OR
microsoftwindows_10_22h2Match-arm64
OR
microsoftwindows_10_22h2Match-x64
OR
microsoftwindows_10_22h2Match-x86
OR
microsoftwindows_11_21h2Match-arm64
OR
microsoftwindows_11_21h2Match-x64
OR
microsoftwindows_11_22h2Match-arm64
OR
microsoftwindows_11_22h2Match-x64
OR
microsoftwindows_server_2019Match-
OR
microsoftwindows_server_2022Match-
AND
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.8
Node
microsoftwindows_10_1809Match-x64
OR
microsoftwindows_10_1809Match-x86
OR
microsoftwindows_server_2019Match-
AND
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.7.2
Node
microsoftwindows_10_1607Match-x64
OR
microsoftwindows_10_1607Match-x86
OR
microsoftwindows_server_2016Match-
AND
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch4.6.2
OR
microsoft.net_frameworkMatch4.7
OR
microsoft.net_frameworkMatch4.7.1
OR
microsoft.net_frameworkMatch4.7.2
Node
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
AND
microsoft.net_frameworkMatch3.5
Node
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
AND
microsoft.net_frameworkMatch3.0sp2
Node
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
AND
microsoft.net_frameworkMatch2.0sp2
Node
microsoft.netMatch6.0.0-
OR
microsoft.netMatch7.0.0

Related

prion 1
osv 12
redhatcve 1
veracode 1
cvelist 1
vulnrichment 1
ubuntucve 1
mscve 1
alpinelinux 1
github 1
cve 1
ibm 1
redhat 5
oraclelinux 4
rocky 2
nessus 15
almalinux 4
openvas 6
ubuntu 2
mskb 20
ics 2
kaspersky 1
rapid7blog 1
prion
prion
Privilege escalation
2023-06-14 15:15:00
osv
osv
BIT-dotnet-sdk-2023-24936
2024-03-06 10:56:24
CVE-2023-24936
2023-06-14 15:15:09
BIT-dotnet-2023-24936
2024-03-06 10:56:15
redhatcve
redhatcve
CVE-2023-24936
2023-06-14 05:49:02
veracode
veracode
Privilege Escalation
2023-06-15 18:24:40
cvelist
cvelist
CVE-2023-24936 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
2023-06-14 14:52:19
vulnrichment
vulnrichment
CVE-2023-24936 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
2023-06-14 14:52:19
ubuntucve
ubuntucve
CVE-2023-24936
2023-06-13 00:00:00
mscve
mscve
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
2023-06-13 07:00:00
alpinelinux
alpinelinux
CVE-2023-24936
2023-06-14 15:15:09
github
github
.NET Elevation of Privilege Vulnerability
2023-06-14 17:04:29
cve
cve
CVE-2023-24936
2023-06-14 15:15:09
ibm
ibm
Security Bulletin: Multiple security vulnerabilities in .NET may affect IBM Robotic Process Automation for Cloud Pak (CVE-2023-24936, CVE-2023-29337, CVE-2023-33128)
2023-08-22 03:25:09
redhat
redhat
(RHSA-2023:3580) Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 08:26:44
(RHSA-2023:3581) Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 07:26:00
(RHSA-2023:3592) Important: .NET 7.0 security, bug fix, and enhancement update
2023-06-14 08:48:07
oraclelinux
oraclelinux
.NET 6.0 security, bug fix, and enhancement update
2023-06-15 00:00:00
.NET 6.0 security, bug fix, and enhancement update
2023-06-16 00:00:00
.NET 7.0 security, bug fix, and enhancement update
2023-06-17 00:00:00
rocky
rocky
.NET 6.0 security, bug fix, and enhancement update
2023-08-31 16:54:34
.NET 7.0 security, bug fix, and enhancement update
2023-08-31 16:54:34
nessus
nessus
RHEL 9 : .NET 6.0 (RHSA-2023:3581)
2023-06-14 00:00:00
RHEL 7 : .NET 6.0 (RHSA-2023:3580)
2023-06-14 00:00:00
Oracle Linux 8 : .NET / 6.0 (ELSA-2023-3582)
2023-06-16 00:00:00
almalinux
almalinux
Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 00:00:00
Important: .NET 7.0 security, bug fix, and enhancement update
2023-06-14 00:00:00
Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6161-2)
2023-06-26 00:00:00
Ubuntu: Security Advisory (USN-6161-1)
2023-06-14 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (KB5027537)
2023-06-14 00:00:00
ubuntu
ubuntu
.NET regression
2023-06-23 00:00:00
.NET vulnerabilities
2023-06-13 00:00:00
mskb
mskb
June 13, 2023-KB5027123 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016
2023-06-13 07:00:00
June 13, 2023-Security Only Update for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8 Standard and Windows Server 2012 (KB5027532)
2023-06-13 07:00:00
June 13, 2023-KB5027539 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2
2023-06-13 07:00:00
ics
ics
Siemens PNI
2023-11-16 12:00:00
Siemens ST7 ScadaConnect
2024-06-13 12:00:00
kaspersky
kaspersky
KLA50317 Multiple vulnerabilities in Microsoft Developer Tools
2023-06-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - June 2023
2023-06-13 20:49:27

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%

JSON
Related for NVD:CVE-2023-24936
prion1osv12redhatcve1veracode1cvelist1vulnrichment1ubuntucve1mscve1alpinelinux1github1cve1ibm1redhat5oraclelinux4rocky2nessus15almalinux4openvas6ubuntu2mskb20ics2kaspersky1rapid7blog1