.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2022-24512

6.3MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Visual Studio 2019 Version 16.7 (includes 16.0 – 16.6); Microsoft Visual Studio 2019 Version 16.9 (includes 16.0 - 16.8); Microsoft Visual Studio 2019 Version 16.11 (includes 16.0 - 16.10); Microsoft Visual Studio 2022 Version 17.0
Vendor: CVE Published:; 9 March 2022

What is CVE-2022-24512?

.NET and Visual Studio Remote Code Execution Vulnerability

.NET 5.0 Unknown 5.0.0 < 5.0.15

.NET 6.0 Unknown 6.0.0 < 6.0.3

.NET Core 3.1 Unknown 3.1 < 3.1.23

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet