9.8

CVE-2023-36049

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ .Net Framework Version2.0 Updatesp2
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 HwPlatformx64
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 HwPlatformx86
Microsoft ≫ .Net Framework Version3.0 Updatesp2
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 HwPlatformx64
Microsoft ≫ .Net Framework Version3.5 Update-
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version3.5 Update-
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
Microsoft ≫ .Net Framework Version4.6.2
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
Microsoft ≫ .Net Framework Version4.7
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
Microsoft ≫ .Net Framework Version4.7.1
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
Microsoft ≫ .Net Framework Version4.7.2
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
Microsoft ≫ .Net Framework Version3.5 Update-
   Microsoft ≫ Windows 10 1507 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1507 Version- HwPlatformx86
   Microsoft ≫ Windows 10 1809 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx86
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
Microsoft ≫ .Net Framework Version4.7.2
   Microsoft ≫ Windows 10 1507 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1507 Version- HwPlatformx86
   Microsoft ≫ Windows 10 1809 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx86
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
Microsoft ≫ .Net Framework Version3.5 Update-
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx86
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx86
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2019 Version-
   Microsoft ≫ Windows Server 2022 Version-
Microsoft ≫ .Net Framework Version4.8
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx86
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx86
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2019 Version-
   Microsoft ≫ Windows Server 2022 Version-
Microsoft ≫ .Net Framework Version3.5 Update-
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx86
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx86
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 22h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 23h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 23h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2022 Version-
Microsoft ≫ .Net Framework Version4.8.1
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx64
   Microsoft ≫ Windows 10 1809 Version- HwPlatformx86
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 10 22h2 Version- HwPlatformx86
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 21h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 22h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 22h2 Version- HwPlatformx64
   Microsoft ≫ Windows 11 23h2 Version- HwPlatformarm64
   Microsoft ≫ Windows 11 23h2 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2022 Version-
Microsoft ≫ .Net Framework Version3.5.1
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
Microsoft ≫ .Net Framework Version4.6.2
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 HwPlatformx64
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 HwPlatformx86
Microsoft ≫ .Net Framework Version4.6.2
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx86
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.7
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx86
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.7.1
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx86
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.7.2
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx86
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.8
   Microsoft ≫ Windows 10 1607 Version- HwPlatformx64
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 HwPlatformx64
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 HwPlatformx86
   Microsoft ≫ Windows Server 2012 Version-
   Microsoft ≫ Windows Server 2012 Versionr2
   Microsoft ≫ Windows Server 2016 Version-
   Microsoft ≫ Windows Server 2019 Version-
Microsoft ≫ .Net Version >= 6.0.0 < 6.0.25
Microsoft ≫ .Net Version >= 7.0.0 < 7.0.14
Microsoft ≫ .Net Version8.0.0 Updaterc1
Microsoft ≫ .Net Version8.0.0 Updaterc2
Microsoft ≫ Visual Studio 2022 Version >= 17.2 < 17.2.22
Microsoft ≫ Visual Studio 2022 Version >= 17.4 < 17.4.14
Microsoft ≫ Visual Studio 2022 Version >= 17.6 < 17.6.10
Microsoft ≫ Visual Studio 2022 Version >= 17.7 < 17.7.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.29% 0.867
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
secure@microsoft.com 7.6 2.8 4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.