Rapid7 Vulnerability & Exploit Database

Microsoft CVE-2023-24895: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Microsoft CVE-2023-24895: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
06/13/2023
Created
06/14/2023
Added
06/13/2023
Modified
06/20/2023

Description

Microsoft CVE-2023-24895: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Solution(s)

  • msft-kb5027107-1eaea069-864f-4ec5-9a6e-9879cabc9aa3
  • msft-kb5027108-c3d2aaea-249d-4639-9ca2-72d398e5fab6
  • msft-kb5027109-021f51f2-e4b4-41f6-8203-d09db117d480
  • msft-kb5027110-12f3452f-ffd8-47dd-9bad-4a9200b7f07a
  • msft-kb5027111-73169ef9-9bf0-400e-9ff4-32b91f9dddd0
  • msft-kb5027112-e608d88d-771e-4d30-98dd-69f2b4d631e5
  • msft-kb5027113-13dce6e5-1341-4b17-ae77-c7c71c7d86bf
  • msft-kb5027113-2312d0e2-df18-4b2d-af7e-df41d120d82d
  • msft-kb5027113-5cbb99b6-b376-4b2b-b6c3-533c80639d48
  • msft-kb5027114-118fdc46-de8d-45f7-b7f7-1ba2b364fd73
  • msft-kb5027114-47baeabc-efa6-4aa2-859e-6db33df0f4e5
  • msft-kb5027115-7ee2a955-10ad-479c-a410-d35c59e7eb01
  • msft-kb5027116-650e20d6-4b0d-40b4-a32b-ace58d928845
  • msft-kb5027117-59b55099-a338-4646-8bf0-56db76ab3077
  • msft-kb5027117-5bb35fe1-89fd-456b-a09a-245d55cecee0
  • msft-kb5027117-899600b2-7636-4758-b9a3-353f54d52373
  • msft-kb5027117-bc960760-8334-4471-962d-b2683794a1c6
  • msft-kb5027119-30c3a269-d750-4782-8b9c-7cf1d51738cb
  • msft-kb5027121-91bb57d0-39ad-4710-8cdd-0f55473f6884
  • msft-kb5027122-3f6275f2-bca0-468b-ae27-d2e9cbd1409e
  • msft-kb5027122-7743573f-3f05-4b58-aed4-7d8eb5bd0599
  • msft-kb5027122-9182c97b-7543-44e5-a7a8-265e06505a16
  • msft-kb5027122-cd149e9d-bac2-4725-92a1-e5abd91d579b
  • msft-kb5027123-0b8ef3c7-e221-4e25-8e31-a053bd99519f
  • msft-kb5027123-88be53f9-f605-408d-9e89-3ccce71a96f2
  • msft-kb5027123-ab03ae8a-8d5f-4197-b8c3-9211fa702834
  • msft-kb5027124-37ea2d6b-9016-4b35-8da7-b238a0b1ca89
  • msft-kb5027124-8fe3d0bd-a56d-4051-ace5-672e61669d58
  • msft-kb5027124-bb7f2723-fa53-4e2c-a587-b4cad8cab182
  • msft-kb5027125-88bd12f2-3125-42ec-b171-5e7a8a9480a0
  • msft-kb5027126-2113428a-0f30-45f5-8f1f-d30c14b5f9a3
  • msft-kb5027127-e552c0b9-30eb-429a-969e-ae6e2eead5d4
  • msft-kb5027127-fb7a0e19-3154-48ed-be7a-5754c1005e01
  • msft-kb5027128-198c9628-d9e1-442e-bef7-6f609877cf07
  • msft-kb5027129-3b08f00a-8b60-43b2-8192-36645c9762ac
  • msft-kb5027131-11a4c22e-02fd-46b0-adeb-25ad7831aea9
  • msft-kb5027131-1d8d8031-d7f3-4d96-b2ba-555764fe8182
  • msft-kb5027131-65921cb7-1b57-49bd-8dc1-ce674d5bd43a
  • msft-kb5027132-01d1959c-2de7-4fff-8dd4-cc6275f3238d
  • msft-kb5027133-5aab5f15-84d0-47e8-84aa-32e5080ed191
  • msft-kb5027134-216c29c3-5733-4bdd-ba34-e3be149c0e48
  • msft-kb5027134-595342db-7d13-40e4-86dc-3e69097227ae
  • msft-kb5027134-aa08f5f1-d0f8-40f5-8377-28e38c4c2068
  • msft-kb5027138-6a789119-f236-46de-8b9b-5e209c84dd94
  • msft-kb5027139-16bf4bba-9dc5-4640-82f5-425c900e1e08
  • msft-kb5027139-80b25d48-d4e9-437e-8386-574d80a0e7f5
  • msft-kb5027140-77d8edb0-69ea-44a0-b4ff-f84dc6fe4bc0
  • msft-kb5027141-5084b83e-612c-4ab8-a4bb-9900a00b3464
  • msft-kb5027230-3f6ad596-36ab-4c78-a041-2b28af5404ac
  • msft-kb5027230-cf798feb-ebf9-403d-ad8d-8754cb6d62c5

References

  • https://attackerkb.com/topics/cve-2023-24895
  • CVE - 2023-24895
  • 5027107
  • 5027108
  • 5027109
  • 5027110
  • 5027111
  • 5027112
  • 5027113
  • 5027114
  • 5027115
  • 5027116
  • 5027117
  • 5027118
  • 5027119
  • 5027121
  • 5027122
  • 5027123
  • 5027124
  • 5027125
  • 5027126
  • 5027127
  • 5027128
  • 5027129
  • 5027131
  • 5027132
  • 5027133
  • 5027134
  • 5027138
  • 5027139
  • 5027140
  • 5027141
  • 5027219
  • 5027230
  • 5027531
  • 5027532
  • 5027533
  • 5027534
  • 5027536
  • 5027537
  • 5027538
  • 5027539
  • 5027540
  • 5027541
  • 5027542
  • 5027543
  • 5027544
  • 5027797
  • 5027798
View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
  • Lightweight Endpoint Agent
  • Live Dashboards
  • Real Risk Prioritization
  • IT-Integrated Remediation Projects
  • Cloud, Virtual, and Container Assessment
  • Integrated Threat Feeds
  • Easy-to-Use RESTful API
  • Automation-Assisted Patching
  • Automated Containment
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;