CVE-2023-24895: Microsoft .net

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Affected products

• Microsoft .net: version 6.0.0 only; version 7.0.0 only
• Microsoft .NET Framework: version 4.8 only; version 4.6.2 only; version 4.7 only; version 4.7.1 only; version 4.7.2 only; version 3.5.1 only; …
• Microsoft Visual Studio 2022: from 17.0, before 17.0.22 (fixed in 17.0.22); from 17.2, before 17.2.16 (fixed in 17.2.16); from 17.4, before 17.4.8 (fixed in 17.4.8); from 17.6, before 17.6.3 (fixed in 17.6.3)

Published 2023-06-14. Last modified 2026-06-17.