CVE-2024-30045 — .NET and Visual Studio Remote Code Execution Vulnerability

Affected: Microsoft .NET 8.0, Microsoft .NET 7.0, Microsoft Visual Studio 2022 version 17.9, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8, Microsoft PowerShell 7.4

.NET and Visual Studio Remote Code Execution Vulnerability

USN-6773-1 — dotnet7, dotnet8 vulnerabilities

Affected: Ubuntu:22.04:LTS: dotnet7, Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet8

It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. (CVE-2024-30045)

It was discovered that .NET did not properly handle the usage of a shared resource. An attacker could possibly use this to cause a dead-lock condition, resulting in a denial of service. (CVE-2024-30046)

Most recent entries from all

CVE-2024-30045 — .NET and Visual Studio Remote Code Execution Vulnerability

USN-6773-1 — dotnet7, dotnet8 vulnerabilities