CVE-2022-24512mediumCWE-94

CVE-2022-24512: falha de média gravidade em Microsoft Visual Studio 2019 version 16.11…

.NET and Visual Studio Remote Code Execution Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Microsoft Visual Studio+ Monitorar .NET

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 1.6%
.NET and Visual Studio Remote Code Execution Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)Microsoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)Microsoft · Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)Microsoft · Microsoft Visual Studio 2022 version 17.0Microsoft · .NET 5.0Microsoft · .NET 6.0Microsoft · .NET Core 3.1Microsoft · PowerShell 7.0Microsoft · PowerShell 7.1Microsoft · PowerShell 7.2
CVEs relacionadas — Microsoft Visual Studio 2019 version 16.11…

No mesmo produto, das mais perigosas para as menos.

CVE-2021-27068HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 53.6%CVE-2021-36952HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 51.5%CVE-2021-26701HIGH.NET Core Remote Code Execution VulnerabilityEPSS 30.1%CVE-2021-41355MEDIUM.NET Core and Visual Studio Information Disclosure VulnerabilityEPSS 20.3%CVE-2020-1597—ASP.NET Core Denial of Service VulnerabilityEPSS 6.6%CVE-2022-30184MEDIUM.NET and Visual Studio Information Disclosure VulnerabilityEPSS 6.1%