Dashboard / CVE-2023-36049

CVE-2023-36049

CRITICAL
INFO Priority: 0.67 BB Relevance: 81/100
Published: 2023-11-14 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Weakness Classification (1)

Affected Software (33)

VendorProductVersion
Microsoft .NET 6.0 6.0.0 < 6.0.25
Microsoft .NET 7.0 7.0.0 < 7.0.14
Microsoft .NET 8.0 8.0 < 8.0.0
Microsoft Microsoft .NET Framework 2.0 Service Pack 2 2.0.0 < 3.0.50727.8975
Microsoft Microsoft .NET Framework 3.0 Service Pack 2 3.0.0 < 3.0.50727.8975
Microsoft Microsoft .NET Framework 3.5 3.5.0 < 3.0.50727.8975
Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 3.0.0.0 < 10.0.14393.6452
Microsoft Microsoft .NET Framework 3.5 AND 4.6/4.6.2 10.0.0 < 10.0.10240.20308
Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 4.7.0 < 4.7.4076.0
Microsoft Microsoft .NET Framework 3.5 AND 4.8 4.8.0 < 4.8.4682.0
Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 4.8.1 < 4.8.9206.0
Microsoft Microsoft .NET Framework 3.5.1 3.5.0 < 3.0.50727.8975
Microsoft Microsoft .NET Framework 4.6.2 4.7.0 < 4.7.4076.0
Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.0 < 4.7.4076.0
Microsoft Microsoft .NET Framework 4.8 4.8.0 < 4.8.4682.0
Microsoft Microsoft Visual Studio 2022 version 17.2 17.2.0 < 17.2.22
Microsoft Microsoft Visual Studio 2022 version 17.4 17.4.0 < 17.4.14
Microsoft Microsoft Visual Studio 2022 version 17.6 17.6.0 < 17.6.10
Microsoft Microsoft Visual Studio 2022 version 17.7 17.7.0 < 17.7.7
microsoft .net 6.0.0 – 6.0.25
microsoft .net 8.0.0
microsoft .net 8.0.0
microsoft .net_framework 2.0
microsoft .net_framework 3.0
microsoft .net_framework 3.5
microsoft .net_framework 4.6.2
microsoft .net_framework 4.7
microsoft .net_framework 4.7.1
microsoft .net_framework 4.7.2
microsoft .net_framework 4.8
Showing 30 of 33 entries

References & Advisories (1)

Bug Bounty Relevance

81 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

6.79%
Raw Score 0.067900
Percentile 94.0%
Date 2026-11-05

EPSS Trend

2026-11-05
0.06790
2026-11-04
0.06790
2026-11-03
0.06790
2026-11-02
0.06790

Intelligence Sources

mitre ref →
nvd ref →

External Links