<< Back
CVE Number Vulnerability Product Severity Date
CVE-2024-43498 .NET and Visual Studio Remote Code Execution Vulnerability "Microsoft Visual Studio .NET" Critical 28-11-2024

Technical Information

In this vulnerability, a remote unauthenticated attacker may perform arbitrary code execution remotely by sending specially crafted requests to a vulnerable .NET webapp or by loading a specially crafted file into a vulnerable desktop app.

Patch release date: Nov 12, 2024
Further information on this vulnerability is available at : CVE-2024-43498

Affected Software

Microsoft Visual Studio 2022 version 17.8,
Microsoft Visual Studio 2022 version 17.6,
Microsoft Visual Studio 2022 version 17.10,
Microsoft Visual Studio 2022 version 17.11,
.NET 9.0 installed on Mac OS,
.NET 9.0 installed on Windows,
.NET 9.0 installed on Linux