ID de Prueba:	1.3.6.1.4.1.25623.1.0.832212
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft .NET Framework Multiple Vulnerabilities (KB5027537)
Resumen:	This host is missing an important security; update according to Microsoft KB5027537
Descripción:	Summary: This host is missing an important security update according to Microsoft KB5027537 Vulnerability Insight: Multiple flaws exist due to, - A vulnerability in the MSDIA SDK where corrupted PDBs can cause heap overflow. - A vulnerability in WPF where the BAML offers other ways to instantiate types that leads to an elevation of privilege. For more information about the vulnerabilities refer to Reference links. Vulnerability Impact: Successful exploitation will allow an attacker to conduct remote code execution or privilege escalation or cause denial of service condition on an affected system. Affected Software/OS: Microsoft .NET Framework 3.5, 4.8 and 4.8.1 on Microsoft Windows 10, version 21H2. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-24895 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24895 Common Vulnerability Exposure (CVE) ID: CVE-2023-24897 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24897 Common Vulnerability Exposure (CVE) ID: CVE-2023-24936 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936 Common Vulnerability Exposure (CVE) ID: CVE-2023-29326 .NET Framework Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29326 Common Vulnerability Exposure (CVE) ID: CVE-2023-29330 Microsoft Teams Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29330 Common Vulnerability Exposure (CVE) ID: CVE-2023-29331 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331
Copyright	Copyright (C) 2023 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.