CVE-2023-33127: .NET and Visual Studio Elevation of Privilege Vulnerability
First published: Tue Jul 11 2023(Updated: )
.NET and Visual Studio Elevation of Privilege Vulnerability
Credit: secure@microsoft.com secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft PowerShell 7.3 | ||
| Microsoft PowerShell 7.2 | ||
| nuget/Microsoft.WindowsDesktop.App.Runtime.win-x86 | >=7.0.0<7.0.9 | 7.0.9 |
| nuget/Microsoft.WindowsDesktop.App.Runtime.win-x86 | >=6.0.0<6.0.20 | 6.0.20 |
| nuget/Microsoft.WindowsDesktop.App.Runtime.win-x64 | >=6.0.0<6.0.20 | 6.0.20 |
| nuget/Microsoft.WindowsDesktop.App.Runtime.win-x64 | >=7.0.0<7.0.9 | 7.0.9 |
| nuget/Microsoft.WindowsDesktop.App.Runtime.win-arm64 | >=6.0.0<6.0.20 | 6.0.20 |
| nuget/Microsoft.WindowsDesktop.App.Runtime.win-arm64 | >=7.0.0<7.0.9 | 7.0.9 |
| Microsoft Visual Studio 2022 | =17.4 | |
| Microsoft Visual Studio 2022 | =17.2 | |
| Microsoft Visual Studio 2022 | =17.0 | |
| Microsoft .NET | >=6.0.0<6.0.20 | |
| Microsoft .NET | >=7.0.0<7.0.9 | |
| Microsoft Visual Studio 2022 | >=17.0.0<17.0.23 | |
| Microsoft Visual Studio 2022 | >=17.2.0<17.2.17 | |
| Microsoft Visual Studio 2022 | >=17.4.0<17.4.9 | |
| Microsoft Visual Studio 2022 | >=17.6.0<17.6.5 | |
| Microsoft Visual Studio 2022 | =17.3 | |
| Microsoft .NET 7.0 | ||
| Microsoft .NET 6.0 | ||
| Microsoft Visual Studio 2022 | >=17.0<17.0.23 | |
| >=6.0.0<6.0.20 | ||
| >=7.0.0<7.0.9 | ||
| >=17.0<17.0.23 | ||
| >=17.2.0<17.2.17 | ||
| >=17.4.0<17.4.9 | ||
| >=17.6.0<17.6.5 | ||
| =17.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/dotnet/runtime/security/advisories/GHSA-485r-rp8v-998v
- https://nvd.nist.gov/vuln/detail/CVE-2023-33127
- https://github.com/dotnet/announcements/issues/263
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33127 (Advisory)
- https://github.com/advisories/GHSA-485r-rp8v-998v (Advisory)
Frequently Asked Questions
What is CVE-2023-33127?
CVE-2023-33127 is a vulnerability that allows elevation of privilege in .NET and Visual Studio.
What is the severity of CVE-2023-33127?
CVE-2023-33127 has a severity rating of high (8.1).
Which software products are affected by CVE-2023-33127?
Microsoft PowerShell 7.2, Visual Studio 2022 (versions 17.2, 17.3, 17.4), PowerShell 7.3, Visual Studio 2022 (versions 17.0, 17.4), .NET (versions 6.0, 7.0).
How can I fix the CVE-2023-33127 vulnerability in Microsoft PowerShell 7.2?
To fix the vulnerability in Microsoft PowerShell 7.2, update to the latest version by following the remediation steps provided by Microsoft.
How can I fix the CVE-2023-33127 vulnerability in Visual Studio 2022 version 17.2?
To fix the vulnerability in Visual Studio 2022 version 17.2, update to the latest version by following the remediation steps provided by Microsoft.
- collector/msrc
- agent/type
- agent/first-publish-date
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-latest
- agent/references
- agent/severity
- agent/author
- agent/remedy
- agent/title
- collector/mitre-cve
- source/MITRE
- collector/msrc-cve
- source/Microsoft
- agent/description
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/weakness
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-485r-rp8v-998v
- alias/CVE-2023-33127
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-cve
- collector/github-advisory
- vendor/microsoft
- canonical/microsoft powershell 7.3
- canonical/microsoft powershell 7.2
- canonical/microsoft visual studio 2022
- version/microsoft visual studio 2022/17.4
- version/microsoft visual studio 2022/17.6
- version/microsoft visual studio 2022/17.2
- version/microsoft visual studio 2022/17.0
- canonical/microsoft .net
- version/microsoft .net/6.0.0
- version/microsoft .net/7.0.0
- version/microsoft visual studio 2022/17.0.0
- version/microsoft visual studio 2022/17.2.0
- version/microsoft visual studio 2022/17.4.0
- version/microsoft visual studio 2022/17.6.0
- version/microsoft visual studio 2022/17.3
- canonical/microsoft .net 7.0
- canonical/microsoft .net 6.0
- package-manager/nuget