Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2024-21409
HistoryApr 09, 2024 - 7:33 p.m.

CVE-2024-21409

2024-04-0919:33:06
redhat.com
access.redhat.com
16
dotnet
use-after-free
code execution
untrusted documents

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

A use-after-free flaw was found in dotnet. This issue can result in code execution when viewing untrusted documents.

Related

mskb 19
alpinelinux 1
openvas 10
nessus 5
cve 1
ubuntucve 1
osv 3
mscve 1
veracode 1
github 1
vulnrichment 1
cvelist 1
nvd 1
kaspersky 1
rapid7blog 1
mskb
mskb
April 9, 2024-Security Only Update for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 (KB5037128)
2024-04-09 07:00:00
April 9, 2024-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5037040)
2024-04-09 07:00:00
April 9, 2024-KB5036609 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016
2024-04-09 07:00:00
alpinelinux
alpinelinux
CVE-2024-21409
2024-04-09 17:15:34
openvas
openvas
Microsoft .NET Framework Remote Code Execution Vulnerability (KB5037035)
2024-04-10 00:00:00
Microsoft .NET Framework Remote Code Execution Vulnerability (KB5036609)
2024-04-10 00:00:00
.NET Core Privilege Escalation Vulnerability (KB5037336)
2024-04-11 00:00:00
nessus
nessus
Security Update for Microsoft .NET Core SDK (April 2024)
2024-04-10 00:00:00
Security Update for Microsoft .NET Core (April 2024)
2024-04-10 00:00:00
Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2024-597)
2024-04-29 00:00:00
cve
cve
CVE-2024-21409
2024-04-09 17:15:34
ubuntucve
ubuntucve
CVE-2024-21409
2024-04-09 00:00:00
osv
osv
BIT-dotnet-2024-21409
2024-06-04 09:39:37
.NET Elevation of Privilege Vulnerability
2024-04-17 18:21:57
BIT-dotnet-sdk-2024-21409
2024-06-04 09:39:34
mscve
mscve
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
2024-04-09 07:00:00
veracode
veracode
Remote Code Execution
2024-04-16 09:19:27
github
github
.NET Elevation of Privilege Vulnerability
2024-04-17 18:21:57
vulnrichment
vulnrichment
CVE-2024-21409 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
2024-04-09 17:00:08
cvelist
cvelist
CVE-2024-21409 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
2024-04-09 17:00:08
nvd
nvd
CVE-2024-21409
2024-04-09 17:15:34
kaspersky
kaspersky
KLA65508 Multiple vulnerabilities in Microsoft Developer Tools
2024-04-09 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - April 2024
2024-04-09 20:28:17

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON
Related for RH:CVE-2024-21409
mskb19alpinelinux1openvas10nessus5cve1ubuntucve1osv3mscve1veracode1github1vulnrichment1cvelist1nvd1kaspersky1rapid7blog1