Lucene search
HistoryJul 09, 2024 - 5:15 p.m.
CVE-2024-38081
.net framework
visual studio
elevation of privilege
vulnerability
cve-2024-38081
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
21.7%
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
Affected configurations
Node
microsoft.net_frameworkMatch4.6.2
ORmicrosoft.net_frameworkMatch4.7
ORmicrosoft.net_frameworkMatch4.7.1
ORmicrosoft.net_frameworkMatch4.7.2
microsoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
Node
microsoft.net_frameworkMatch3.5
ORmicrosoft.net_frameworkMatch4.8
microsoftwindows_10_1607x64
ORmicrosoftwindows_10_1607x86
ORmicrosoftwindows_10_1809
ORmicrosoftwindows_10_21h2
ORmicrosoftwindows_10_22h2
ORmicrosoftwindows_11_21h2
ORmicrosoftwindows_server_2008Matchr2x64
ORmicrosoftwindows_server_2012x64
ORmicrosoftwindows_server_2012Matchr2x64
ORmicrosoftwindows_server_2016
ORmicrosoftwindows_server_2019
ORmicrosoftwindows_server_2022
Node
microsoft.net_frameworkMatch3.5.1
microsoftwindows_server_2008Matchr2x64
Node
microsoft.net_frameworkMatch3.5
microsoftwindows_server_2008Match-sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
ORmicrosoftwindows_server_2012x64
ORmicrosoftwindows_server_2012Matchr2x64
Node
microsoft.net_frameworkMatch3.0sp2
microsoftwindows_server_2008Match-sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
Node
microsoft.net_frameworkMatch2.0sp2
microsoftwindows_server_2008Match-sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
Node
microsoft.net_frameworkMatch4.6.2
microsoftwindows_server_2008Match-sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
Node
microsoft.net_frameworkMatch4.8.1
microsoftwindows_10_21h2
ORmicrosoftwindows_10_22h2
ORmicrosoftwindows_11_21h2
ORmicrosoftwindows_11_22h2
ORmicrosoftwindows_11_23h2
ORmicrosoftwindows_server_2022
ORmicrosoftwindows_server_2022_23h2
Node
microsoft.netRange6.0.0â6.0.32
ORmicrosoftvisual_studio_2022Range17.4â17.4.21
ORmicrosoftvisual_studio_2022Range17.6â17.6.17
ORmicrosoftvisual_studio_2022Range17.8â17.8.12
Node
microsoft.net_frameworkMatch3.5
ORmicrosoft.net_frameworkMatch4.7.2
microsoftwindows_10_1607x64
ORmicrosoftwindows_10_1607Match-x86
ORmicrosoftwindows_10_1809
ORmicrosoftwindows_server_2016
ORmicrosoftwindows_server_2019
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | .net_framework | 4.6.2 | cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:* |
| microsoft | .net_framework | 4.7 | cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:* |
| microsoft | .net_framework | 4.7.1 | cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:* |
| microsoft | .net_framework | 4.7.2 | cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* |
| microsoft | windows_server_2012 | - | cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2012 | r2 | cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* |
| microsoft | .net_framework | 3.5 | cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* |
| microsoft | .net_framework | 4.8 | cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:* |
| microsoft | windows_10_1607 | * | cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:* |
Related
redhatcve
redhatcve
CVE-2024-38081
2024-07-09 16:22:23
mskb
mskb
mscve
mscve
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
2024-07-09 07:00:00
openvas
openvas
Microsoft .NET Framework Elevation of Privilege Vulnerability (KB5041019)
2024-07-10 00:00:00
Microsoft .NET Framework Elevation of Privilege Vulnerability (KB5041017)
2024-07-10 00:00:00
Microsoft .NET Framework Elevation of Privilege Vulnerability (KB5039885)
2024-07-10 00:00:00
osv
osv
CVE-2024-38081
2024-07-09 00:00:00
BIT-dotnet-2024-38081
2024-08-20 07:18:07
cvelist
cvelist
vulnrichment
vulnrichment
github
github
nessus
nessus
Security Updates for Microsoft .NET Framework (July 2024)
2024-07-12 00:00:00
Security Updates for Microsoft Visual Studio Products (July 2024)
2024-07-09 00:00:00
Security Update for Microsoft .NET Core SDK (July 2024)
2024-07-10 00:00:00
alpinelinux
alpinelinux
CVE-2024-38081
2024-07-09 17:15:43
ubuntucve
ubuntucve
CVE-2024-38081
2024-07-09 00:00:00
veracode
veracode
Privilege Escalation
2024-07-10 07:26:05
cve
cve
CVE-2024-38081
2024-07-09 17:15:43
kaspersky
kaspersky
KLA70414 Multiple vulnerabilities in Microsoft Developer Tools
2024-07-09 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - July 2024
2024-07-09 20:03:58
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
21.7%
Related for NVD:CVE-2024-38081