CVE-2024-21404

Published: Feb 13, 2024Modified: Aug 10, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: secure@microsoft.com (Secondary)

Description

.NET Denial of Service Vulnerability

Affected (6)

Products: Microsoft: Asp.net Core, Visual Studio 2022

2 products

Visual Studio 2022

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft Asp.net Core	6.0.0 ≤ version < 6.0.27
Microsoft Asp.net Core	7.0.0 ≤ version < 7.0.16
Microsoft Asp.net Core	8.0.0 ≤ version < 8.0.2
Microsoft Visual Studio 2022	17.4.0 ≤ version < 17.4.16
Microsoft Visual Studio 2022	17.6.0 ≤ version < 17.6.12
Microsoft Visual Studio 2022	17.8.0 ≤ version < 17.8.7

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21404

Source: secure@microsoft.com

PatchVendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21404

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.