Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-21808

.NET and Visual Studio Remote Code Execution Vulnerability

Description

.NET and Visual Studio Remote Code Execution Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft .NET 6.0

  • 6.0.0 to < 6.0.14affected

Microsoft .NET 7.0

  • 7.0.0 to < 7.0.3affected

Microsoft Microsoft .NET Framework 3.5 and 4.6.2

  • 4.7.0 to < 10.0.10240.19747affected

Microsoft Microsoft .NET Framework 3.5 AND 4.7.2

  • 4.7.0 to < 10.0.04038.03affected

Microsoft Microsoft .NET Framework 3.5 AND 4.8

  • 4.8.0 to < 10.0.04614.06affected

Microsoft Microsoft .NET Framework 3.5 AND 4.8.1

  • 4.8.1 to < 10.0.09139.02affected

Microsoft Microsoft .NET Framework 4.6.2

  • 4.7.0 to < 4.7.04038.06affected

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

  • 4.7.0 to < 4.7.04614.08affected

Microsoft Microsoft .NET Framework 4.8

  • 4.8.0 to < 4.8.04614.05affected

Microsoft Microsoft Visual Studio 2013 Update 5

  • 12.0.0 to < 12.0.40700.0affected

Microsoft Microsoft Visual Studio 2015 Update 3

  • 14.0.0 to < 14.0.27555.0affected

Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)

  • 15.9.0 to < 15.9.52affected

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)

  • 16.11.0 to < 16.11.24affected

Microsoft Microsoft Visual Studio 2022 version 17.0

  • 17.0.0 to < 17.0.19affected

Microsoft Microsoft Visual Studio 2022 version 17.2

  • 17.2.0 to < 17.2.13affected

Microsoft Microsoft Visual Studio 2022 version 17.4

  • 17.4.0 to < 17.4.5affected

Microsoft PowerShell 7.2

  • 7.2.0 to < 7.2.10affected

References