CVE-2024-38081

CVE-2024-38081 is a .NET/.NET Framework and Visual Studio elevation of privilege vulnerability (CVSS v3.1: 7.3, LOCAL attacker, LOW attack complexity, user interaction required,Privileges: LOW). Exploitation leads to total impact on confidentiality, integrity and availability as per the Microsoft...

CVE-2024-38081 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

...

CVE-2024-38081

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

CVE-2024-38081 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

...

CVE-2024-30105 .NET and Visual Studio Denial of Service Vulnerability

...

CVE-2024-30105 .NET and Visual Studio Denial of Service Vulnerability

...

CVE-2024-30105

CVE-2024-30105 affects .NET 8.0 applications (notably involving System.Text.Json) and can cause a Denial of Service when deserializing untrusted input via JsonSerializer.DeserializeAsyncEnumerable. Connected advisories confirm the vulnerability in .NET Core/Visual Studio with DoS conditions and i...

CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2024-35264 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2024-35264

CVE-2024-35264 is a remote code execution vulnerability in .NET/ASP.NET Core 8.0 related to Data Corruption in Kestrel HTTP/3 that affects multiple ASP.NET Core runtime packages. According to the Microsoft GHSA advisory, affected ASP.NET Core runtimes (e.g., Microsoft.AspNetCore.App.Runtime.* for...

CVE-2024-35264 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2024-35264

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2024-38095

A vulnerability was found in dotNET when Parsing X.509 Content and ObjectIdentifiers. This issue can lead to a denial of service attack. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising eas...

CVE-2024-38081

A vulnerability was found in dotNET. The Visual Studio Installer may allow the elevation of privilege via NuGet configuration file lockfile hijacking. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2024-35264

A vulnerability was found in dotNET when parsing ASP.NET Core 8. This issue can lead to a denial of service attack. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

.NET and Visual Studio Remote Code Execution Vulnerability

...

.NET and Visual Studio Denial of Service Vulnerability

...

Security Updates for Microsoft Visual Studio Products (July 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - .NET Core and Visual Studio Denial of Service Vulnerability. CVE-2024-30105, CVE-2024-38095 - .NET and Visual Studio Remote Code Execution Vulnerability...

UBUNTU-CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability...

Microsoft Visual Studio and Microsoft .NET Security Vulnerabilities

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...