7.8

CVE-2023-28260

.NET DLL Hijacking Remote Code Execution Vulnerability

Data is provided by the National Vulnerability Database (NVD)
Microsoft.Net Version >= 6.0.0 < 6.0.16
Microsoft.Net Version >= 7.0.0 < 7.0.5
MicrosoftVisual Studio 2022 Version >= 17.0 < 17.0.21
MicrosoftVisual Studio 2022 Version >= 17.2 < 17.2.15
MicrosoftVisual Studio 2022 Version >= 17.4 < 17.4.7
MicrosoftVisual Studio 2022 Version >= 17.5 < 17.5.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.28% 0.84
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
secure@microsoft.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H