CVE-2023-28260

Published: Apr 11, 2023
Updated: May 9, 2024
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-28260" target="_blank" rel="noopener"> CVE-2023-28260
GHSA: <a href="https://github.com/advisories/GHSA-w4m3-43gp-x8hx" target="_blank" rel="noopener"> GHSA-w4m3-43gp-x8hx
Severity: High
Exploit:

.NET DLL Hijacking Remote Code Execution Vulnerability

CVSS v3:

No CWE or OWASP classifications available.

Software	From	Fixed in
Microsoft.NETCore.App.Runtime.win-arm	7.0.0	7.0.5
Microsoft.NETCore.App.Runtime.win-arm	6.0.0	6.0.16
Microsoft.NETCore.App.Runtime.win-arm64	7.0.0	7.0.5
Microsoft.NETCore.App.Runtime.win-arm64	6.0.0	6.0.16
Microsoft.NETCore.App.Runtime.win-x86	7.0.0	7.0.5
Microsoft.NETCore.App.Runtime.win-x86	6.0.0	6.0.16
Microsoft.NETCore.App.Runtime.win-x64	6.0.0	6.0.16
Microsoft.NETCore.App.Runtime.win-x64	7.0.0	7.0.5
microsoft / .net	7.0.0	7.0.5
microsoft / visual_studio_2022	17.5	17.5.4
microsoft / visual_studio_2022	17.4	17.4.7
microsoft / visual_studio_2022	17.2	17.2.15
microsoft / visual_studio_2022	17.0	17.0.21
microsoft / .net	6.0.0	6.0.16