9.1
Critical
CVE-2024-0057 NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
Description
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| .NET 8.0 8.0 | 8.0 → < 8.0.1 | 8.0.1 |
| .NET 7.0 7.0 | 7.0.0 → < 7.0.15 | 7.0.15 |
| .NET 6.0 6.0 | 6.0.0 → < 6.0.26 | 6.0.26 |
| Microsoft Visual Studio 2022 version 17.2 17.2 | 17.2.0 → < 17.2.23 | 17.2.23 |
| Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) 16.11 | 16.11.0 → < 16.11.34 | 16.11.34 |
| Microsoft Visual Studio 2022 version 17.4 17.4 | 17.4.0 → < 17.4.15 | 17.4.15 |
| Microsoft Visual Studio 2022 version 17.6 17.6 | 17.6.0 → < 17.6.11 | 17.6.11 |
| Microsoft Visual Studio 2022 version 17.8 17.8 | 17.8.0 → < 17.8.4 | 17.8.4 |
| NuGet 5.11.0 5.11 | 5.11.0 → < 5.11.6.0 | 5.11.6.0 |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| NuGet 17.4.0 17.4 | 17.4.0 → < 17.4.3.0 | 17.4.3.0 |
| NUGET 17.6.0 17.6 | 17.6.0 → < 17.6.2.0 | 17.6.2.0 |
| NuGet 17.8.0 17.8 | 17.8.0 → < 17.8.1.0 | 17.8.1.0 |
| PowerShell 7.2 7.2 | 7.2.0 → < 7.2.18 | 7.2.18 |
| PowerShell 7.3 7.3 | 7.3.0 → < 7.3.11 | 7.3.11 |
| PowerShell 7.4 7.4 | 7.4.0 → < 7.4.2 | 7.4.2 |
| Microsoft .NET Framework 4.8 4.8 | 4.8.0 → < 4.8.04690.02 | 4.8.04690.02 |
| Microsoft .NET Framework 3.5 AND 4.8 4.8 | 4.8.0 → < 4.8.04690.02 | 4.8.04690.02 |
| Microsoft .NET Framework 3.5 AND 4.7.2 4.7 | 4.7.0 → < 4.7.04081.03 | 4.7.04081.03 |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7 | 4.7.0 → < 4.7.04081.02 | 4.7.04081.02 |
| Microsoft .NET Framework 3.5 AND 4.8.1 4.8 | 4.8.1 → < 4.8.09214.01 | 4.8.09214.01 |
| Microsoft .NET Framework 2.0 Service Pack 2 2.0 | 2.0.0 → < 3.0.50727.8976 | 3.0.50727.8976 |
| Microsoft .NET Framework 3.0 Service Pack 2 3.0 | 3.0.0 → < 3.0.50727.8976 | 3.0.50727.8976 |
References
- NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of .NET 8.0
The 94 CVEs of .NET 8.0 →
CVE-2026-105016
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network
9.8
Critical
CVE-2026-58280
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network
7.5
High
CVE-2026-96233
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network
7.5
High
CVE-2026-96229
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network
6.5
Medium