Microsoft · Security update · June 13, 2023

KB5027536: June 2023 security update

KB5027536, released June 13, 2023, fixes 6 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
6
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0263
85th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 1 High 5 Routine 0

Applies to

Product
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2023-24897 .NET and Visual Studio Remote Code Execution 7.8 0.0118 Exploitation Less Likely
High CVE-2023-29331 .NET Core Denial of Service 7.5 0.0263 Exploitation Less Likely
High CVE-2023-32030 .NET and Visual Studio Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2023-24936 .NET and Visual Studio Elevation of Privilege 7.5 0.0156 Exploitation Less Likely
High CVE-2023-24895 .NET and Visual Studio Remote Code Execution 7.8 0.0106 Exploitation Less Likely
High CVE-2023-29326 .NET Framework Remote Code Execution 7.8 0.0090 Exploitation Less Likely
Showing 1 to 6 of 6 1