Test ID:	1.3.6.1.4.1.25623.1.0.832211
Category:	Windows : Microsoft Bulletins
Title:	Microsoft .NET Framework Multiple Vulnerabilities (KB5027538)
Summary:	This host is missing an important security; update according to Microsoft KB5027538
Description:	Summary: This host is missing an important security update according to Microsoft KB5027538 Vulnerability Insight: Multiple flaws exist due to, - A vulnerability in the MSDIA SDK where corrupted PDBs can cause heap overflow. - A vulnerability in WPF where the BAML offers other ways to instantiate types that leads to an elevation of privilege. For more information about the vulnerabilities refer to Reference links. Vulnerability Impact: Successful exploitation will allow an attacker to conduct remote code execution or privilege escalation or cause denial of service condition on an affected system. Affected Software/OS: Microsoft .NET Framework 3.5, 4.8 and 4.8.1 on Microsoft Windows 10, version 22H2. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-24895 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24895 Common Vulnerability Exposure (CVE) ID: CVE-2023-24897 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24897 Common Vulnerability Exposure (CVE) ID: CVE-2023-24936 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936 Common Vulnerability Exposure (CVE) ID: CVE-2023-29326 .NET Framework Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29326 Common Vulnerability Exposure (CVE) ID: CVE-2023-29330 Microsoft Teams Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29330 Common Vulnerability Exposure (CVE) ID: CVE-2023-29331 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.