Lucene search
Veracode Vulnerability DatabaseVERACODE:40923HistoryJun 16, 2023 - 6:22 a.m.
Remote Code Execution (RCE)
2023-06-1606:22:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
31
remote code execution
wpf applications
xps documents
upload
execute
malicious code
system
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
47.4%
Microsoft.WindowsDesktop.App.Runtime is vulnerable to Remote Code Execution (RCE). The vulnerability is due to how WPF applications load and render XPS documents which allows a local attacker to upload and execute malicious code on the system.
Related
redhatcve
redhatcve
CVE-2023-24895
2023-06-14 05:48:57
osv
osv
BIT-dotnet-sdk-2023-24895
2024-03-06 10:56:46
.NET Remote Code Execution Vulnerability
2023-06-14 17:02:24
BIT-dotnet-2023-24895
2024-03-06 10:56:39
nvd
nvd
CVE-2023-24895
2023-06-14 15:15:09
cve
cve
CVE-2023-24895
2023-06-14 15:15:09
mscve
mscve
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
2023-06-13 07:00:00
alpinelinux
alpinelinux
CVE-2023-24895
2023-06-14 15:15:09
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2023-24895
2023-06-14 00:00:00
github
github
.NET Remote Code Execution Vulnerability
2023-06-14 17:02:24
prion
prion
Remote code execution
2023-06-14 15:15:00
mskb
mskb
June 13, 2023-Security Only Update for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8.1 and Windows Server 2012 R2 (KB5027533)
2023-06-13 07:00:00
openvas
openvas
Microsoft .NET Framework Multiple Vulnerabilities (KB5027537)
2023-06-14 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (KB5027538)
2023-06-14 00:00:00
.NET Core Multiple Vulnerabilities - Windows
2023-06-14 00:00:00
nessus
nessus
Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-242)
2023-07-20 00:00:00
Security Updates for Microsoft .NET Framework (June 2023)
2023-06-16 00:00:00
Security Updates for Microsoft Visual Studio Products (June 2023)
2023-06-13 00:00:00
ics
ics
Siemens PNI
2023-11-16 12:00:00
Siemens ST7 ScadaConnect
2024-06-13 12:00:00
kaspersky
kaspersky
KLA50317 Multiple vulnerabilities in Microsoft Developer Tools
2023-06-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - June 2023
2023-06-13 20:49:27
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
47.4%
Related for VERACODE:40923