Microsoft · Security update · June 13, 2023
KB5027798: June 2023 security update
KB5027798, released June 13, 2023, fixes 8 CVEs in .NET 7.0. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
8
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0263
85th percentile
Priority of the 8 CVEs
Patch now 0
Urgent 1
High 7
Routine 0
Applies to
| Product |
|---|
| .NET 7.0 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2023-24897 | .NET and Visual Studio | Remote Code Execution | 7.8 | 0.0118 | Exploitation Less Likely |
| High | CVE-2023-29331 | .NET Core | Denial of Service | 7.5 | 0.0263 | Exploitation Less Likely |
| High | CVE-2023-24936 | .NET and Visual Studio | Elevation of Privilege | 7.5 | 0.0156 | Exploitation Less Likely |
| High | CVE-2023-24895 | .NET and Visual Studio | Remote Code Execution | 7.8 | 0.0106 | Exploitation Less Likely |
| High | CVE-2023-33128 | .NET and Visual Studio | Remote Code Execution | 7.5 | 0.0100 | Exploitation Less Likely |
| High | CVE-2023-33126 | .NET and Visual Studio | Remote Code Execution | 7.3 | 0.0100 | Exploitation Less Likely |
| High | CVE-2023-33135 | .NET and Visual Studio | Elevation of Privilege | 7.3 | 0.0100 | Exploitation Less Likely |
| High | CVE-2023-32032 | .NET and Visual Studio | Elevation of Privilege | 7.5 | 0.0060 | Exploitation Less Likely |
Showing 1 to 8 of 8
1