.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8epss 1.2%
exploitation probability
1.2%top 33% of all CVEs
observed exploitation
nono source reports it
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Build Tools for Visual Studio 2022Microsoft · Microsoft Visual Studio 2022 version 17.10Microsoft · Microsoft Visual Studio 2022 version 17.12Microsoft · Microsoft Visual Studio 2022 version 17.13Microsoft · Microsoft Visual Studio 2022 version 17.8Microsoft · .NET 8.0Microsoft · .NET 9.0