CVE-2023-28260

.NET DLL Hijacking Remote Code Execution Vulnerability

State: Published
Severity: 7.8 High
Published: Apr 11, 2023
Updated: May 28, 2026
Reserved: Mar 13, 2023

Description

.NET DLL Hijacking Remote Code Execution Vulnerability

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C	microsoft

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
.NET 6.0Microsoft	6.0.0 to before 6.0.16Affected
.NET 7.0Microsoft	7.0.0 to before 7.0.5Affected
Microsoft Visual Studio 2022 version 17.5Microsoft	17.5.0 to before 17.5.4Affected
Microsoft Visual Studio 2022 version 17.4Microsoft	17.4.0 to before 17.4.7Affected
Microsoft Visual Studio 2022 version 17.2Microsoft	17.2.0 to before 17.2.15Affected
Microsoft Visual Studio 2022 version 17.0Microsoft	17.0.0 to before 17.0.21Affected
PowerShell 7.3Microsoft	7.3.0 to before 7.3.4Affected
PowerShell 7.2Microsoft	7.2.0 to before 7.2.11Affected

References

.NET DLL Hijacking Remote Code Execution Vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.