CVE-2023-36049: Microsoft .net

Critical severity, CVSS 9.8. EPSS: 12.5% chance of exploitation in the next 30 days.

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Affected products

• Microsoft .net: from 6.0.0, before 6.0.25 (fixed in 6.0.25); from 7.0.0, before 7.0.14 (fixed in 7.0.14); version 8.0.0 only
• Microsoft .NET Framework: version 2.0 only; version 3.0 only; version 3.5 only; version 4.6.2 only; version 4.7 only; version 4.7.1 only; …
• Microsoft Visual Studio 2022: from 17.2, before 17.2.22 (fixed in 17.2.22); from 17.4, before 17.4.14 (fixed in 17.4.14); from 17.6, before 17.6.10 (fixed in 17.6.10); from 17.7, before 17.7.7 (fixed in 17.7.7)

Published 2023-11-14. Last modified 2026-06-17.