← CVE Intelligence

CVE-2024-21409

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / Microsoft Visual Studio 2022 version 17.9	affected 17.0 before 17.9.6
Microsoft / Microsoft Visual Studio 2022 version 17.4	affected 17.4.0 before 17.4.18
Microsoft / Microsoft Visual Studio 2022 version 17.6	affected 17.6.0 before 17.6.14
Microsoft / Microsoft Visual Studio 2022 version 17.8	affected 17.8.0 before 17.8.9
Microsoft / PowerShell 7.3	affected 7.3.0 before 7.3.12
Microsoft / PowerShell 7.4	affected 7.4.0 before 7.4.2
Microsoft / PowerShell 7.2	affected 7.2.0 before 7.2.19
Microsoft / .NET 6.0	affected 6.0.0 before 6.0.29
Microsoft / .NET 7.0	affected 7.0.0 before 7.0.18
Microsoft / .NET 8.0	affected 8.0 before 8.0.4
Microsoft / Microsoft .NET Framework 4.8	affected 4.8.0 before 4.8.4718.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.8	affected 4.8.0 before 4.8.4718.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.7.2	affected 4.7.0 before 4.7.4092.0
Microsoft / Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2	affected 4.7.0 before 4.7.4092.0
Microsoft / Microsoft .NET Framework 3.5 AND 4.8.1	affected 4.8.1 before 4.8.9236.0
Microsoft / Microsoft .NET Framework 4.6.2	affected 4.7.0 before 4.7.4092.0

CWE

CWE-416

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21409

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.