VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 14, 2023· Updated Aug 19, 2026

CVE-2023-21808

CVE-2023-21808

Description

.NET and Visual Studio Remote Code Execution Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
Microsoft.NetCore.App.Runtime.win-armNuGet
>= 7.0.0, < 7.0.37.0.3
Microsoft.NetCore.App.Runtime.win-armNuGet
>= 6.0.0, < 6.0.146.0.14
Microsoft.NetCore.App.Runtime.win-arm64NuGet
>= 7.0.0, < 7.0.37.0.3
Microsoft.NetCore.App.Runtime.win-arm64NuGet
>= 6.0.0, < 6.0.146.0.14
Microsoft.NetCore.App.Runtime.win-x64NuGet
>= 7.0.0, < 7.0.37.0.3
Microsoft.NetCore.App.Runtime.win-x64NuGet
>= 6.0.0, < 6.0.146.0.14
Microsoft.NetCore.App.Runtime.win-x86NuGet
>= 7.0.0, < 7.0.37.0.3
Microsoft.NetCore.App.Runtime.win-x86NuGet
>= 6.0.0, < 6.0.146.0.14

Affected products

37
  • Microsoft/Net2 versions
    cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net:7.0.0:*:*:*:*:*:*:*
  • Microsoft/.net Framework14 versions
    cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*
    • (no CPE)range: 4.7.0
    • (no CPE)range: 4.7.0
    • (no CPE)range: 4.8.0
    • (no CPE)range: 4.8.1
    • (no CPE)range: 4.7.0
    • (no CPE)range: 4.7.0
    • (no CPE)range: 4.8.0
  • Microsoft/Visual Studio 2017
    cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
    Range: >=15.0,<15.9.51
  • Microsoft/Visual Studio4 versions
    cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*range: >=16.0,<16.11.24
    • cpe:2.3:a:microsoft:visual_studio_2022:17.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio_2022:17.4:*:*:*:*:*:*:*
  • osv-coords6 versions
    pkg:bitnami/dotnetpkg:bitnami/dotnet-sdkpkg:nuget/microsoft.netcore.app.runtime.win-armpkg:nuget/microsoft.netcore.app.runtime.win-arm64pkg:nuget/microsoft.netcore.app.runtime.win-x64pkg:nuget/microsoft.netcore.app.runtime.win-x86
    >= 6.0.0, < 6.0.1+ 5 more
    • (no CPE)range: >= 6.0.0, < 6.0.1
    • (no CPE)range: >= 6.0.0, < 6.0.1
    • (no CPE)range: >= 7.0.0, < 7.0.3
    • (no CPE)range: >= 7.0.0, < 7.0.3
    • (no CPE)range: >= 7.0.0, < 7.0.3
    • (no CPE)range: >= 7.0.0, < 7.0.3
  • Microsoft/.NET 6.0v5
    Range: 6.0.0
  • Microsoft/.NET 7.0v5
    Range: 7.0.0
  • Microsoft/Microsoft Visual Studio 2013 Update 5v5
    Range: 12.0.0
  • Microsoft/Microsoft Visual Studio 2015 Update 3v5
    Range: 14.0.0
  • Microsoft/Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)v5
    Range: 15.9.0
  • Microsoft/Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)v5
    Range: 16.11.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.0v5
    Range: 17.0.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.2v5
    Range: 17.2.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.4v5
    Range: 17.4.0
  • Microsoft/Powershellcpe-rescue
    Range: 7.2.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.