onyx

onyx --cves cve-2023-36049

CVE-2023-36049

HIGH.NET
score
<0.1
cvss
7.6
epss
6.8% ▼5.7
published
2023-11-14
kev added
—
first seen

.NET, .NET Framework, and Visual Studio contain an elevation of privilege caused by improper validation in their components, letting local attackers execute arbitrary code with elevated privileges, exploit requires local access and user interaction.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2023-11-14 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 12.5%2026-09-23: epss 12.5%2026-09-24: epss 12.5%2026-09-25: epss 12.5%2026-09-26: epss 12.5%2026-09-27: epss 12.5%2026-09-28: epss 12.5%2026-09-29: epss 12.5%2026-09-30: epss 12.5%2026-10-01: epss 12.5%2026-10-02: epss 12.5%2026-10-03: epss 12.5%2026-10-04: epss 12.5%2026-10-05: epss 12.5%2026-10-06: epss 12.5%2026-10-07: epss 12.5%2026-10-08: epss 12.5%2026-10-09: epss 12.5%2026-10-10: epss 12.5%2026-10-11: epss 12.5%2026-10-12: epss 12.5%2026-10-13: epss 12.5%2026-10-14: epss 12.5%2026-10-15: epss 12.5%2026-10-16: epss 12.5%2026-10-18: epss 12.5%2026-10-19: epss 6.8%2026-10-20: epss 6.8%2026-10-21: epss 6.8%6.8%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-20 NVD-CWE-noinfo

References 1