CVE Number | Vulnerability | Product | Severity | Date |
---|---|---|---|---|
CVE-2024-43498 | .NET and Visual Studio Remote Code Execution Vulnerability | "Microsoft Visual Studio .NET" | Critical | 28-11-2024 |
Technical Information
In this vulnerability, a remote unauthenticated attacker may perform arbitrary code execution remotely by sending specially crafted requests to a vulnerable .NET webapp or by loading a specially crafted file into a vulnerable desktop app.
Patch release date: Nov 12, 2024
Further information on this vulnerability is available at : CVE-2024-43498
Affected Software
Microsoft Visual Studio 2022 version 17.8,Microsoft Visual Studio 2022 version 17.6,
Microsoft Visual Studio 2022 version 17.10,
Microsoft Visual Studio 2022 version 17.11,
.NET 9.0 installed on Mac OS,
.NET 9.0 installed on Windows,
.NET 9.0 installed on Linux