Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2023-28260

.NET DLL Hijacking Remote Code Execution Vulnerability

Published: Apr 11, 2023
Updated: May 9, 2024
CVE: CVE-2023-28260
GHSA: GHSA-w4m3-43gp-x8hx
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
Microsoft.NETCore.App.Runtime.win-arm	7.0.0	7.0.5
Microsoft.NETCore.App.Runtime.win-arm	6.0.0	6.0.16
Microsoft.NETCore.App.Runtime.win-arm64	7.0.0	7.0.5
Microsoft.NETCore.App.Runtime.win-arm64	6.0.0	6.0.16
Microsoft.NETCore.App.Runtime.win-x86	7.0.0	7.0.5
Microsoft.NETCore.App.Runtime.win-x86	6.0.0	6.0.16
Microsoft.NETCore.App.Runtime.win-x64	6.0.0	6.0.16
Microsoft.NETCore.App.Runtime.win-x64	7.0.0	7.0.5
microsoft / .net	7.0.0	7.0.5
microsoft / visual_studio_2022	17.5	17.5.4
microsoft / visual_studio_2022	17.4	17.4.7
microsoft / visual_studio_2022	17.2	17.2.15
microsoft / visual_studio_2022	17.0	17.0.21
microsoft / .net	6.0.0	6.0.16

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime