Riskcovery

CVE-2022-41089

.NET Framework Remote Code Execution Vulnerability

State
Published
Severity
7.8 High
Published
Dec 13, 2022
Updated
May 27, 2026
Reserved
Sep 19, 2022

Read the record on cve.org

Description

.NET Framework Remote Code Execution Vulnerability

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Cmicrosoft

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Microsoft Visual Studio 2022 version 17.2Microsoft
  • 17.2.0 to before 17.2.11Affected
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)Microsoft
  • 16.11.0 to before 16.11.22Affected
Microsoft Visual Studio 2022 version 17.0Microsoft
  • 17.0.0 to before 17.0.17Affected
Microsoft Visual Studio 2022 version 17.4Microsoft
  • 17.4.0 to before 17.4.3Affected
.NET 6.0Microsoft
  • 6.0.0 to before 6.0.12Affected
.NET Core 3.1Microsoft
  • 3.1 to before 3.1.32Affected
.NET 7.0Microsoft
  • 7.0.0 to before 7.0.1Affected
PowerShell 7.2Microsoft
  • 7.2.0 to before 7.2.9Affected
PowerShell 7.3Microsoft
  • 7.3.0 to before 7.3.2Affected
Microsoft .NET Framework 4.8Microsoft
  • 4.8.0 to before 04590.02Affected
Microsoft .NET Framework 3.5 AND 4.8Microsoft
  • 4.8.0 to before 04590.02Affected
Microsoft .NET Framework 3.5 AND 4.7.2Microsoft
  • 4.7.0 to before 04010.02Affected
Microsoft .NET Framework 3.5 AND 4.8.1Microsoft
  • 4.8.1 to before 09115.01Affected
Microsoft .NET Framework 2.0 Service Pack 2Microsoft
  • 2.0.0 to before 30729.8953Affected
Microsoft .NET Framework 3.0 Service Pack 2Microsoft
  • 3.0.0 to before 30729.8953Affected
Microsoft .NET Framework 3.5Microsoft
  • 3.5.0 to before 30729.8953Affected
Microsoft .NET Framework 3.5.1Microsoft
  • 3.5.0 to before 30729.8953Affected
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2Microsoft
  • 4.7.0 to before 04010.02Affected
Microsoft .NET Framework 4.6.2Microsoft
  • 4.7.0 to before 04010.02Affected
Microsoft .NET Framework 3.5 AND 4.6/4.6.2Microsoft
  • 10.0.0 to before 10.0.10240.19624Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.