https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:12:41.219011+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-05994 bdu:2024-05994 2026-10-02T10:12:41.337492+00:00 bdu:2024-05994 https://cve.radiocsirt.org/vuln/bell-cve-2024-38081 BELL-CVE-2024-38081 2026-10-02T10:12:41.337534+00:00

Affected: Alpaquita:stream: dotnet6-build, Alpaquita:stream: dotnet6-runtime

 https://cve.radiocsirt.org/vuln/bit-dotnet-2024-38081 BIT-dotnet-2024-38081 — .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability 2026-10-02T10:12:41.337573+00:00

Affected: Bitnami: dotnet

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0558 certfr-2024-avi-0558 — De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant… 2026-10-02T10:12:41.337607+00:00 certfr-2024-avi-0558 https://cve.radiocsirt.org/vuln/cleanstart-2025-kl68323 CLEANSTART-2025-KL68323 — .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability 2026-10-02T10:12:41.337634+00:00

Affected: CleanStart: dotnet6-build, CleanStart: dotnet6-runtime

CVE-2024-38081 affects multiple packages. . See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-263050 EUVD-2026-263050 2026-10-02T10:12:41.337676+00:00 EUVD-2026-263050 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38081 fkie_cve-2024-38081 2026-10-02T10:12:41.337690+00:00

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

 https://cve.radiocsirt.org/vuln/ghsa-hq7w-xv5x-g34j GHSA-hq7w-xv5x-g34j — Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability 2026-10-02T10:12:41.337710+00:00

Affected: NuGet: Microsoft.IO.Redist

# Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability

## <a name="executive-summary"></a>Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0 . This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A Vulnerability exist in Visual Studio installer on Windows OS where an unprivileged user is allowed to manipulate the Visual Studio installation resulting in elevation of privilege.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/313

## <a name="mitigation-factors"></a>Mitigation factors

Microsoft has not identified any mitigating factors for this vulnerability.

## <a name="affected-software"></a>Affected software

* Any .NET 6.0 application running on .NET 6.0.31 or earlier.

## <a name="affected-packages"></a>Affected Packages The vulnerability affects any Microsoft .NET Core project if it uses any of affected packages versions listed below

### <a name=".NET 6"></a>.NET 6

Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.IO.Redist](https://www.nuget.org/packages/Microsoft.IO.Redist) | >=4.6.0-preview.18571.3, <=6.0.0 | 6.0.1

## Advisory FAQ

### <a name="how-affected"></a>How do I know if I am affected?

If you have a runtime or SDK with a version listed,…

 https://cve.radiocsirt.org/vuln/icsa-25-135-02 ICSA-25-135-02 — Siemens INTRALOG WMS 2026-10-02T10:12:41.337771+00:00

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability .NET Denial of Service Vulnerability .NET and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability .NET and Visual Studio Denial of Service Vulnerability .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Denial of Service Vulnerability

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38081 UBUNTU-CVE-2024-38081 2026-10-02T10:12:41.337798+00:00

Affected: Ubuntu:22.04:LTS: dotnet7

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1560 WID-SEC-W-2024-1560 — Microsoft .NET Framework: Mehrere Schwachstellen 2026-10-02T10:12:41.337815+00:00

Ein lokaler oder ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework und Microsoft Visual Studio 2022 ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen und eine Denial-of-Service-Situation zu erzeugen.