CVE-2023-24897: Microsoft .net

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Affected products

• Microsoft .net: version 6.0.0 only; version 7.0.0 only
• Microsoft .NET Framework: version 4.8 only; version 4.6.2 only; version 4.7 only; version 4.7.1 only; version 4.7.2 only; version 3.5 only; …
• Microsoft Visual Studio: version 2015 only
• Microsoft Visual Studio 2017: from 15.0, up to and including 15.8; from 15.9, before 15.9.55 (fixed in 15.9.55)
• Microsoft Visual Studio 2019: from 16.0, up to and including 16.10; from 16.11, before 16.11.27 (fixed in 16.11.27)
• Microsoft Visual Studio 2022: from 17.0, before 17.0.22 (fixed in 17.0.22); from 17.2, before 17.2.16 (fixed in 17.2.16); from 17.4, before 17.4.8 (fixed in 17.4.8); from 17.6, before 17.6.3 (fixed in 17.6.3)

Published 2023-06-14. Last modified 2026-06-17.