CVE-2022-24512 — MEDIUM (6.3)

Q: What is CVE-2022-24512?

CVE-2022-24512 is a vulnerability with a CVSS score of 6.3 (MEDIUM). .NET and Visual Studio Remote Code Execution Vulnerability

Q: How severe is CVE-2022-24512?

CVE-2022-24512 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2022-24512?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft .Net, Microsoft .Net Core, Microsoft Powershell, Microsoft Visual Studio 2019, Microsoft Visual Studio 2022.

Vulnerability Description

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS Score

6.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Microsoft	.Net	5.0
Microsoft	.Net Core	3.1
Microsoft	Powershell	>= 7.0, < 7.0.9
Microsoft	Visual Studio 2019	>= 16.0, <= 16.6.4
Microsoft	Visual Studio 2022	>= 17.0, < 17.0.7
Fedoraproject	Fedora	34

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512PatchVendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512PatchVendor Advisory

FAQ

What is CVE-2022-24512?

CVE-2022-24512 is a vulnerability with a CVSS score of 6.3 (MEDIUM). .NET and Visual Studio Remote Code Execution Vulnerability

How severe is CVE-2022-24512?

CVE-2022-24512 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-24512?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft .Net, Microsoft .Net Core, Microsoft Powershell, Microsoft Visual Studio 2019, Microsoft Visual Studio 2022.