Riskcovery

CVE-2024-0057

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

State
Published
Severity
9.1 Critical
Published
Jan 9, 2024
Updated
Jun 3, 2025
Reserved
Nov 22, 2023

Read the record on cve.org

Description

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

Scores

CVSSScoreVectorSource
3.19.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:Cmicrosoft

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
.NET 8.0Microsoft
  • 8.0 to before 8.0.1Affected
.NET 7.0Microsoft
  • 7.0.0 to before 7.0.15Affected
.NET 6.0Microsoft
  • 6.0.0 to before 6.0.26Affected
Microsoft Visual Studio 2022 version 17.2Microsoft
  • 17.2.0 to before 17.2.23Affected
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)Microsoft
  • 16.11.0 to before 16.11.34Affected
Microsoft Visual Studio 2022 version 17.4Microsoft
  • 17.4.0 to before 17.4.15Affected
Microsoft Visual Studio 2022 version 17.6Microsoft
  • 17.6.0 to before 17.6.11Affected
Microsoft Visual Studio 2022 version 17.8Microsoft
  • 17.8.0 to before 17.8.4Affected
NuGet 5.11.0Microsoft
  • 5.11.0 to before 5.11.6.0Affected
NuGet 17.4.0Microsoft
  • 17.4.0 to before 17.4.3.0Affected
NUGET 17.6.0Microsoft
  • 17.6.0 to before 17.6.2.0Affected
NuGet 17.8.0Microsoft
  • 17.8.0 to before 17.8.1.0Affected
PowerShell 7.2Microsoft
  • 7.2.0 to before 7.2.18Affected
PowerShell 7.3Microsoft
  • 7.3.0 to before 7.3.11Affected
PowerShell 7.4Microsoft
  • 7.4.0 to before 7.4.2Affected
Microsoft .NET Framework 4.8Microsoft
  • 4.8.0 to before 4.8.04690.02Affected
Microsoft .NET Framework 3.5 AND 4.8Microsoft
  • 4.8.0 to before 4.8.04690.02Affected
Microsoft .NET Framework 3.5 AND 4.7.2Microsoft
  • 4.7.0 to before 4.7.04081.03Affected
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2Microsoft
  • 4.7.0 to before 4.7.04081.02Affected
Microsoft .NET Framework 3.5 AND 4.8.1Microsoft
  • 4.8.1 to before 4.8.09214.01Affected
Microsoft .NET Framework 2.0 Service Pack 2Microsoft
  • 2.0.0 to before 3.0.50727.8976Affected
Microsoft .NET Framework 3.0 Service Pack 2Microsoft
  • 3.0.0 to before 3.0.50727.8976Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.