PT-2023-3374 · Microsoft+1 · Visual Studio+2

Ycdxsb

·

Published

2023-06-13

·

Updated

2024-12-13

·

CVE-2023-33126

CVSS v3.1

7.3

High

VectorAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio and Microsoft .NET (affected versions not specified)
Description The issue is related to insufficient input validation in Microsoft Visual Studio and the Microsoft .NET platform. Exploitation of this issue may allow an attacker to execute arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2023-4590
ALT-PU-2023-4591
ALT-PU-2023-4592
ALT-PU-2023-4593
ALT-PU-2023-4594
ALT-PU-2023-4595
ALT-PU-2023-4610
ALT-PU-2023-4611
ALT-PU-2024-16792
ALT-PU-2024-16794
ALT-PU-2024-16796
ALT-PU-2024-16939
BDU:2023-03531
BIT-DOTNET-2023-33126
BIT-DOTNET-SDK-2023-33126
CVE-2023-33126
GHSA-GH24-9QJJ-MR67

Affected Products

Alt Linux
.Net Framework
Visual Studio