CVE-2023-33126
HighCVSS 7.3Exploitation Probability (EPSS)
Elevated risk58th percentile - higher than 58% of all known CVEs
Summary
.NET and Visual Studio contain a vulnerability that allows remote code execution, potentially leading to unauthorized access to the system.
Risk Assessment
Exploitation of this vulnerability could result in serious security implications for the organization, including data loss and loss of control over systems.
Recommendation
It is recommended to update .NET and Visual Studio to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in .NET, Visual Studio
See all- CVE-2022-29145High
A vulnerability in .NET and Visual Studio allows for a Denial of Service (DoS) attack, potentially leading to application or service unavailability. An attacker can exploit this flaw to disrupt system operations.
- CVE-2022-29117High
.NET and Visual Studio contain a Denial of Service (DoS) vulnerability that can lead to application unavailability.
- CVE-2022-24464High
.NET and Visual Studio contain a Denial of Service (DoS) vulnerability that can lead to service unavailability.
- CVE-2023-38180HighActively exploited
A vulnerability in .NET and Visual Studio allows for a Denial of Service (DoS) attack, potentially leading to application or service unavailability. An attacker can exploit this flaw to disrupt system operations.
- CVE-2023-35390High
A vulnerability in .NET and Visual Studio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on a remote system.
- CVE-2023-33127High
.NET and Visual Studio contain a vulnerability that may lead to elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
- CVE-2023-33135High
.NET and Visual Studio contain an elevation of privilege vulnerability that could allow an attacker to gain higher privileges on the system.
- CVE-2023-33128High
A vulnerability in .NET and Visual Studio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on a remote system.
Original NVD description (English source)
.NET and Visual Studio Remote Code Execution Vulnerability