← Back

CVE-2024-43498

nvd nist
Published: Nov 12, 2024Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

.NET and Visual Studio Remote Code Execution Vulnerability

Affected (5)

Microsoft
2 products
.net
Visual Studio 2022
Configuration A
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
.net
Version 9.0.0
Running on/withPlatform Versions
Apple
Macos
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Visual Studio 2022
From 17.10.0 to 17.10.9
Visual Studio 2022
From 17.11.0 to 17.11.6
Visual Studio 2022
From 17.6 to 17.6.21
Visual Studio 2022
From 17.8 to 17.8.16

Related CWEs

CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

References (1)

Source: secure@microsoft.com
PatchVendor Advisory

Timeline

No history available yet.