CVE-2024-30045

Published: May 14, 2024Modified: Jun 17, 2026

6.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Exploitability: 2.8 / Impact: 3.4

Source: secure@microsoft.com (Secondary)

Description

.NET and Visual Studio Remote Code Execution Vulnerability

Affected (7)

Products: Microsoft: .net, Powershell, Visual Studio 2022

3 products

Visual Studio 2022

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net	7.0.0 ≤ version < 7.0.19
Microsoft .net	8.0.0 ≤ version < 8.0.5
Microsoft Powershell	7.4 ≤ version < 7.4.3
Microsoft Visual Studio 2022	17.4.0 ≤ version < 17.4.19
Microsoft Visual Studio 2022	17.6.0 ≤ version < 17.6.15
Microsoft Visual Studio 2022	17.8.0 ≤ version < 17.8.10
Microsoft Visual Studio 2022	17.9.0 ≤ version < 17.9.7

Related CWEs

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (3)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045

Source: secure@microsoft.com

Vendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://security.netapp.com/advisory/ntap-20241122-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.