The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A vulnerability in VSInstallerElevationService when running a malicious executable, which     can lead to an Elevation of Privilege. (CVE-2023-36758)

  - A vulnerability in pgodriver.sys where reading a malicious file can lead to an Elevation of     Privilege. (CVE-2023-36759)

  - A vulnerability in DiaSymReader.dll when reading a corrupted PDB file can lead to a Remote     Code Execution. (CVE-2023-36792, CVE-2023-36793, CVE-2023-36794, CVE-2023-36796) 

  - A vulnerability in .NET where reading a maliciously crafted X.509 certificate may result in     a Denial of Service. This issue only affects Linux systems. (CVE-2023-36799) 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Microsoft .NET Core SDK installed on the remote host is 6.0.x prior to 6.0.122, 6.0.x prior to 6.0.317, 6.0.x prior to 6.0.414, 7.0.x prior to 7.0.111 or 7.0.x prior to 7.0.308 or 7.0.x prior to 7.0.401.
It is, therefore, affected by multiple vulnerabilities, as follows:

  - A vulnerability exists in Microsoft.DiaSymReader.Native.amd64.dll when reading a corrupted PDB file which   may lead to remote code execution. This issue only affects Windows systems. (CVE-2023-36792)   
  - A vulnerability exists in Microsoft.DiaSymReader.Native.amd64.dll when reading a corrupted PDB file which   may lead to remote code execution. This issue only affects Windows systems. (CVE-2023-36793)

  - A vulnerability exists in Microsoft.DiaSymReader.Native.amd64.dll when reading a corrupted PDB file which   may lead to remote code execution. This issue only affects Windows systems. (CVE-2023-36794)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the dotnet package has been released.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
181293	Security Updates for Microsoft Visual Studio Products (September 2023)	Nessus	Windows : Microsoft Bulletins	2023/9/12	2023/10/12	critical
181406	Security Update for .NET Core SDK (September 2023)	Nessus	Windows	2023/9/14	2026/5/19	high
237067	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	Nessus	PhotonOS Local Security Checks	2025/5/22	2026/11/2	high
333884	Photon OS 5.0: Dotnet PHSA-2025-5.0-91-0499	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/11/2	high
234310	Photon OS 5.0: Dotnet PHSA-2025-5.0-0499	Nessus	PhotonOS Local Security Checks	2025/4/13	2026/10/14	high

検出

プラグインの検索

critical

high

high

high

high