CVE-2024-30105

CVE-2024-30105 affects .NET 8.0 applications (notably involving System.Text.Json) and can cause a Denial of Service when deserializing untrusted input via JsonSerializer.DeserializeAsyncEnumerable. Connected advisories confirm the vulnerability in .NET Core/Visual Studio with DoS conditions and i...

CVE-2024-30105 .NET and Visual Studio Denial of Service Vulnerability

...

CVE-2024-30105 .NET and Visual Studio Denial of Service Vulnerability

...

CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2024-35264

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2024-35264 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2024-35264

CVE-2024-35264 is a remote code execution vulnerability in .NET/ASP.NET Core 8.0 related to Data Corruption in Kestrel HTTP/3 that affects multiple ASP.NET Core runtime packages. According to the Microsoft GHSA advisory, affected ASP.NET Core runtimes (e.g., Microsoft.AspNetCore.App.Runtime.* for...

CVE-2024-35264 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2024-35264

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2024-38095

A vulnerability was found in dotNET when Parsing X.509 Content and ObjectIdentifiers. This issue can lead to a denial of service attack. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising eas...

CVE-2024-38081

A vulnerability was found in dotNET. The Visual Studio Installer may allow the elevation of privilege via NuGet configuration file lockfile hijacking. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2024-35264

A vulnerability was found in dotNET when parsing ASP.NET Core 8. This issue can lead to a denial of service attack. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

.NET and Visual Studio Denial of Service Vulnerability

...

.NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2024-38081

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

Microsoft Visual Studio and Microsoft .NET Security Vulnerabilities

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

UBUNTU-CVE-2024-35264

.NET and Visual Studio Remote Code Execution Vulnerability...

PT-2024-26412

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio affected versions not specified Description The issue concerns a remote code execution vulnerability. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where...

Security Updates for Microsoft Visual Studio Products (July 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - .NET Core and Visual Studio Denial of Service Vulnerability. CVE-2024-30105, CVE-2024-38095 - .NET and Visual Studio Remote Code Execution Vulnerability...

PT-2024-5163

Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in the .NET and Visual Studio software platform, which can be exploited by a remote attacker to cause a denial of servic...