.NET DLL Hijacking Remote Code Execution Vulnerability

An update of the dotnet package has been released.

A remote code execution vulnerability exists in .NET core 6.0 < 6.0.16 and .NET Core 7.0 < 7.0.5. This vulnerability exists due to how .NET running on Windows where a runtime DLL can be loaded from an unexpected location, resulting in remote code execution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - .NET DLL Hijacking Remote Code Execution Vulnerability. (CVE-2023-28260)

  - Visual Studio Elevation of Privilege Vulnerability. (CVE-2023-28262)

  - Visual Studio Information Disclosure Vulnerability. (CVE-2023-28263)

  - Visual Studio Remote Code Execution Vulnerability. (CVE-2023-28296)

  - Visual Studio Spoofing Vulnerability. (CVE-2023-28299)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6006-1 advisory.

    It was discovered that .NET did not properly manage dll files. An attacker could potentially use this     issue to execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
234310	Photon OS 5.0: Dotnet PHSA-2025-5.0-0499	Nessus	PhotonOS Local Security Checks	critical
174219	Security Updates for Microsoft .NET core (April 2023)	Nessus	Windows	high
174163	Security Updates for Microsoft Visual Studio Products (April 2023)	Nessus	Windows : Microsoft Bulletins	high
174154	Ubuntu 22.04 LTS : .NET vulnerability (USN-6006-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2023-28260

high

Tenable Plugins

critical

high

high

high