Redhat.comRH:CVE-2023-28260CVE-2023-28260
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
55.8%
A vulnerability was found in dotNet. A runtime DLL may be loaded from an unexpected location, resulting in remote code execution.
References
bugzilla.redhat.com/show_bug.cgi?id=2185016
github.com/dotnet/core/blob/309062100ff65bac1e5628db126bc4deb232a7a5/release-notes/6.0/6.0.16/6.0.16.md#microsoft-security-advisory-cve-2023-28260-net-remote-code-execution-vulnerability
nvd.nist.gov/vuln/detail/CVE-2023-28260
www.cve.org/CVERecord?id=CVE-2023-28260
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
55.8%