.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft Visual Studio 2022 version 17.9 | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.4 | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.6 | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.8 | affected |
|
||||||
| Microsoft | PowerShell 7.3 | affected |
|
||||||
| Microsoft | PowerShell 7.4 | affected |
|
||||||
| Microsoft | PowerShell 7.2 | affected |
|
||||||
| Microsoft | .NET 6.0 | affected |
|
||||||
| Microsoft | .NET 7.0 | affected |
|
||||||
| Microsoft | .NET 8.0 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 4.8 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 3.5 AND 4.7.2 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8.1 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 4.6.2 | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
No data.
No data available yet.
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-6qmx-42h2-j8h6 | .NET Elevation of Privilege Vulnerability |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 2.5% (2.513% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft
Microsoft .net Microsoft .net Framework Microsoft powershell Microsoft visual Studio 2022 Microsoft windows 10 1607 Microsoft windows 10 1809 Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 21h2 Microsoft windows 11 22h2 Microsoft windows 11 23h2 Microsoft windows Server 2008 Microsoft windows Server 2012 Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft windows Server 2022 |
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:* cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft
Microsoft .net Microsoft .net Framework Microsoft powershell Microsoft visual Studio 2022 Microsoft windows 10 1607 Microsoft windows 10 1809 Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 21h2 Microsoft windows 11 22h2 Microsoft windows 11 23h2 Microsoft windows Server 2008 Microsoft windows Server 2012 Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft windows Server 2022 |
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:microsoft:powershell:7.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:powershell:7.3:-:*:*:*:*:*:* cpe:2.3:a:microsoft:powershell:7.4:-:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio:2022:*:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio_2022:17.4:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft
Microsoft .net Microsoft powershell Microsoft visual Studio Microsoft visual Studio 2022 |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|