by Kastro
Paper/Archive/CVE-2023-36049

CVE-2023-36049

Microsoft Microsoft Visual Studio 2022 version 17.2 — .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

EPSS 7%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 94.0.940 × 2018.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Affected

ProductAffectedFixed inSource
Microsoft Visual Studio 2022 version 17.217.2.0 – < 17.2.2217.2.22CNA
Microsoft Visual Studio 2022 version 17.417.4.0 – < 17.4.1417.4.14CNA
Microsoft Visual Studio 2022 version 17.717.7.0 – < 17.7.717.7.7CNA
Microsoft Visual Studio 2022 version 17.617.6.0 – < 17.6.1017.6.10CNA
.NET 8.08.0 – < 8.0.08.0.0CNA
.NET 6.06.0.0 – < 6.0.256.0.25CNA
.NET 7.07.0.0 – < 7.0.147.0.14CNA
Microsoft .NET Framework 3.5 AND 4.8.14.8.1 – < 4.8.9206.04.8.9206.0CNA
Microsoft .NET Framework 4.84.8.0 – < 4.8.4682.04.8.4682.0CNA
Microsoft .NET Framework 3.5 AND 4.84.8.0 – < 4.8.4682.04.8.4682.0CNA
Microsoft .NET Framework 3.5 AND 4.7.24.7.0 – < 4.7.4076.04.7.4076.0CNA
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.23.0.0.0 – < 10.0.14393.645210.0.14393.6452CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
microsoft (CNA)7.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L/E:P/RL:O/RC:C

References

advisorymsrc.microsoft.com/update-guide/vulnerability/CVE-2023-36049