A remote code execution vulnerability exists in .NET core 6.0 < 6.0.16 and .NET Core 7.0 < 7.0.5. This vulnerability exists due to how .NET running on Windows where a runtime DLL can be loaded from an unexpected location, resulting in remote code execution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - .NET DLL Hijacking Remote Code Execution Vulnerability. (CVE-2023-28260)

  - Visual Studio Elevation of Privilege Vulnerability. (CVE-2023-28262)

  - Visual Studio Information Disclosure Vulnerability. (CVE-2023-28263)

  - Visual Studio Remote Code Execution Vulnerability. (CVE-2023-28296)

  - Visual Studio Spoofing Vulnerability. (CVE-2023-28299)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the dotnet package has been released.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6006-1 advisory.

    It was discovered that .NET did not properly manage dll files. An attacker could potentially use this     issue to execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
174219	Security Updates for Microsoft .NET core (April 2023)	Nessus	Windows	4/13/2023	1/16/2024	high
174163	Security Updates for Microsoft Visual Studio Products (April 2023)	Nessus	Windows : Microsoft Bulletins	4/12/2023	4/8/2024	high
237067	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	Nessus	PhotonOS Local Security Checks	5/22/2025	6/13/2025	high
174154	Ubuntu 22.04 LTS : .NET vulnerability (USN-6006-1)	Nessus	Ubuntu Local Security Checks	4/12/2023	8/27/2024	high
234310	Photon OS 5.0: Dotnet PHSA-2025-5.0-0499	Nessus	PhotonOS Local Security Checks	4/13/2025	4/14/2025	critical

Detections

Analytics

Plugins Search

high

high

high

high

critical