VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 14, 2023· Updated Jun 17, 2026

CVE-2023-24895

CVE-2023-24895

Description

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
Microsoft.WindowsDesktop.App.Runtime.win-arm64NuGet
>= 7.0.0, < 7.0.77.0.7
Microsoft.WindowsDesktop.App.Runtime.win-x64NuGet
>= 7.0.0, < 7.0.77.0.7
Microsoft.WindowsDesktop.App.Runtime.win-x86NuGet
>= 7.0.0, < 7.0.77.0.7
Microsoft.WindowsDesktop.App.Runtime.win-arm64NuGet
>= 6.0.0, < 6.0.186.0.18
Microsoft.WindowsDesktop.App.Runtime.win-x64NuGet
>= 6.0.0, < 6.0.186.0.18
Microsoft.WindowsDesktop.App.Runtime.win-x86NuGet
>= 6.0.0, < 6.0.186.0.18

Affected products

37
  • Microsoft/.NET 7.0v5
    Range: 7.0.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.0v5
    Range: 17.0.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.2v5
    Range: 17.2.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.4v5
    Range: 17.4.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.6v5
    Range: 17.6.0
  • Microsoft/Powershellcpe-rescue2 versions
    7.2.0+ 1 more
    • (no CPE)range: 7.2.0
    • (no CPE)range: 7.3.0
  • ghsa-coords5 versions
    pkg:nuget/microsoft.windowsdesktop.app.runtime.win-arm64pkg:nuget/microsoft.windowsdesktop.app.runtime.win-x64pkg:nuget/microsoft.windowsdesktop.app.runtime.win-x86pkg:bitnami/dotnetpkg:bitnami/dotnet-sdk
    >= 7.0.0, < 7.0.7+ 4 more
    • (no CPE)range: >= 7.0.0, < 7.0.7
    • (no CPE)range: >= 7.0.0, < 7.0.7
    • (no CPE)range: >= 7.0.0, < 7.0.7
    • (no CPE)range: >= 6.0.0, < 6.0.1
    • (no CPE)range: >= 6.0.0, < 6.0.1
  • Microsoft/.net Frameworkcpe-rescue22 versions
    4.8.0+ 21 more
    • (no CPE)range: 4.8.0
    • (no CPE)range: 4.8.0
    • (no CPE)range: 4.7.0
    • (no CPE)range: 3.0.0.0
    • (no CPE)range: 4.7.0
    • (no CPE)range: 4.8.1
    • (no CPE)range: 4.7.0
    • (no CPE)range: 4.7.0
    • (no CPE)range: 2.0.0
    • (no CPE)range: 3.0.0
    • (no CPE)range: 3.5.0
    • (no CPE)range: 3.5.0
    • cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
  • Microsoft/Net2 versions
    cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net:7.0.0:*:*:*:*:*:*:*
  • Microsoft/Visual Studio
    cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
    Range: >=17.0,<17.0.22

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.