NuGet/Microsoft.NetCore.App.Runtime.win-arm CVE-2023-33126: high 7.3, EPSS 1.00%
Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability
Action: Upgrade Microsoft.NetCore.App.Runtime.win-arm to 6.0.18 (6.x) or 7.0.7 (7.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.0.7 | - |
| 6.0.0 | 6.0.18 | - |
Fixed versions
| 7.0.7 | 6.0.18 |
Sources
- osv: GHSA-gh24-9qjj-mr67
- https://github.com/dotnet/sdk/security/advisories/GHSA-gh24-9qjj-mr67
- https://nvd.nist.gov/vuln/detail/CVE-2023-33126
- https://github.com/dotnet/announcements/issues/254
- https://github.com/dotnet/sdk
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126
CVE-2023-33126 · published · modified · JSON