Test ID:	1.3.6.1.4.1.25623.1.0.832090
Category:	Windows
Title:	.NET Core Multiple Vulnerabilities - Windows
Summary:	.NET Core is prone to multiple vulnerabilities.
Description:	Summary: .NET Core is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - A Remote Code Execution Vulnerability in XAML Frame elements. - A Remote Code Execution Vulnerability in DataTable from XML. - A Denial of Service Vulnerability in .NET source generator. Vulnerability Impact: Successful exploitation will allow an attacker to conduct remote code execution on an affected system. Affected Software/OS: .NET Core runtime 7.0 before 7.0.7, 6.0 before 6.0.18 and .NET Core SDK before 6.0.313 and 7.0 before 7.0.304. Solution: Upgrade .NET Core runtimes to versions 7.0.7 or 6.0.18 or later or upgrade .NET Core SDK to versions 6.0.118 or 7.0.304 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-33135 .NET and Visual Studio Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33135 Common Vulnerability Exposure (CVE) ID: CVE-2023-33128 .NET and Visual Studio Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33128 Common Vulnerability Exposure (CVE) ID: CVE-2023-33126 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126 Common Vulnerability Exposure (CVE) ID: CVE-2023-24936 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936 Common Vulnerability Exposure (CVE) ID: CVE-2023-24897 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24897 Common Vulnerability Exposure (CVE) ID: CVE-2023-29331 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331 Common Vulnerability Exposure (CVE) ID: CVE-2023-24895 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24895 Common Vulnerability Exposure (CVE) ID: CVE-2023-32032 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32032
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.