CVE-2023-35390
HighCVSS 7.8Exploitation Probability (EPSS)
High risk81th percentile - higher than 81% of all known CVEs
Summary
A vulnerability in .NET and Visual Studio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on a remote system.
Risk Assessment
Organizations may face serious threats, including data theft and system takeover. Exploitation of this vulnerability could lead to significant security incidents.
Recommendation
It is recommended to update .NET and Visual Studio to the latest versions to mitigate this vulnerability. Additionally, systems should be monitored for unauthorized activities.
Other vulnerabilities in .NET, Visual Studio
See all- CVE-2022-29145High
A vulnerability in .NET and Visual Studio allows for a Denial of Service (DoS) attack, potentially leading to application or service unavailability. An attacker can exploit this flaw to disrupt system operations.
- CVE-2022-29117High
.NET and Visual Studio contain a Denial of Service (DoS) vulnerability that can lead to application unavailability.
- CVE-2022-24464High
.NET and Visual Studio contain a Denial of Service (DoS) vulnerability that can lead to service unavailability.
- CVE-2023-38180HighActively exploited
A vulnerability in .NET and Visual Studio allows for a Denial of Service (DoS) attack, potentially leading to application or service unavailability. An attacker can exploit this flaw to disrupt system operations.
- CVE-2023-33127High
.NET and Visual Studio contain a vulnerability that may lead to elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
- CVE-2023-33135High
.NET and Visual Studio contain an elevation of privilege vulnerability that could allow an attacker to gain higher privileges on the system.
- CVE-2023-33128High
A vulnerability in .NET and Visual Studio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on a remote system.
- CVE-2023-33126High
.NET and Visual Studio contain a vulnerability that allows remote code execution, potentially leading to unauthorized access to the system.
Original NVD description (English source)
.NET and Visual Studio Remote Code Execution Vulnerability