CVE-2024-29059

.NET Framework Information Disclosure Vulnerability

State: Published
Severity: 7.5 High
Published: Mar 22, 2024
Updated: Oct 21, 2025
Reserved: Mar 14, 2024

Description

.NET Framework Information Disclosure Vulnerability

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	microsoft

Weaknesses

CWE-209 Generation of Error Message Containing Sensitive Information

Affected Products

Product	Versions
Microsoft .NET Framework 4.8Microsoft	4.8.0 to before 4.8.04690.02Affected
Microsoft .NET Framework 3.5 AND 4.8Microsoft	4.8.0 to before 4.8.04690.02Affected
Microsoft .NET Framework 3.5 AND 4.7.2Microsoft	4.7.0 to before 4.7.04081.03Affected
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2Microsoft	4.7.0 to before 4.7.04081.03Affected
Microsoft .NET Framework 3.5 AND 4.8.1Microsoft	4.8.1 to before 4.8.09214.01Affected
Microsoft .NET Framework 4.6.2Microsoft	4.7.0 to before 4.7.04081.03Affected
Microsoft .NET Framework 3.5 AND 4.6/4.6.2Microsoft	10.0.0 to before 10.0.10240.20402Affected
Microsoft .NET Framework 2.0 Service Pack 2Microsoft	2.0.0 to before 3.0.50727.8976Affected
Microsoft .NET Framework 3.0 Service Pack 2Microsoft	3.0.0 to before 3.0.50727.8976Affected
Microsoft .NET Framework 3.5Microsoft	3.5.0 to before 3.0.50727.8976Affected
Microsoft .NET Framework 3.5.1Microsoft	3.5.0 to before 3.0.30729.8959Affected

References

.NET Framework Information Disclosure Vulnerabilityvendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29059government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.