PatchTheCVEmono vulnerabilities and fixes
Recent CVEs affecting mono, with upgrade or downgrade steps. 2 tracked.
mono has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-07-11. Highest priority: CVE-2023-26314 (score 51/100).
- CVE-2023-35373 MEDIUM 5.3 UPGRADE Mono Authenticode Validation Spoofing Vulnerability
- CVE-2023-26314 HIGH 8.8 MITIGATE MITIGATE The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/
FAQ
How do I fix mono vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mono being exploited right now?
None of the tracked mono CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mono CVE should I patch first?
CVE-2023-26314 currently ranks highest (51/100): The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/.