{"action":"Upgrade Microsoft.NetCore.App.Runtime.win-arm64 to 6.0.18 (6.x) or 7.0.7 (7.x) or later.","affected":[{"fixed":"7.0.7","introduced":"7.0.0"},{"fixed":"6.0.18","introduced":"6.0.0"}],"component":"Microsoft.NetCore.App.Runtime.win-arm64","cve_ids":["CVE-2023-33126"],"ecosystem":"NuGet","epss":0.00999,"exploited":false,"fixed_versions":["7.0.7","6.0.18"],"ghsa_id":"GHSA-gh24-9qjj-mr67","id":"tcs_01M5N8P6G56X1026FDJQDF1DTE","modified_at":"2024-12-03T06:05:43.299133Z","published_at":"2023-06-14T17:18:10Z","references":["https://osv.dev/vulnerability/GHSA-gh24-9qjj-mr67","https://github.com/dotnet/sdk/security/advisories/GHSA-gh24-9qjj-mr67","https://nvd.nist.gov/vuln/detail/CVE-2023-33126","https://github.com/dotnet/announcements/issues/254","https://github.com/dotnet/sdk","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-gh24-9qjj-mr67#NuGet/Microsoft.NetCore.App.Runtime.win-arm64","url":"https://osv.dev/vulnerability/GHSA-gh24-9qjj-mr67"}],"summary":"Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability"}