Most recent entries from all

bdu:2024-05994

BELL-CVE-2024-38081

Affected: Alpaquita:stream: dotnet6-build, Alpaquita:stream: dotnet6-runtime

BIT-dotnet-2024-38081 — .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Affected: Bitnami: dotnet

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

certfr-2024-avi-0558 — De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant…

certfr-2024-avi-0558

CLEANSTART-2025-KL68323 — .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Affected: CleanStart: dotnet6-build, CleanStart: dotnet6-runtime

CVE-2024-38081 affects multiple packages. . See references for individual vulnerability details.

EUVD-2026-263050

fkie_cve-2024-38081

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

GHSA-hq7w-xv5x-g34j — Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability

Affected: NuGet: Microsoft.IO.Redist

# Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability

## <a name="executive-summary"></a>Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0 . This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A Vulnerability exist in Visual Studio installer on Windows OS where an unprivileged user is allowed to manipulate the Visual Studio installation resulting in elevation of privilege.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/313

## <a name="mitigation-factors"></a>Mitigation factors

Microsoft has not identified any mitigating factors for this vulnerability.

## <a name="affected-software"></a>Affected software

* Any .NET 6.0 application running on .NET 6.0.31 or earlier.

## <a name="affected-packages"></a>Affected Packages The vulnerability affects any Microsoft .NET Core project if it uses any of affected packages versions listed below

### <a name=".NET 6"></a>.NET 6

Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.IO.Redist](https://www.nuget.org/packages/Microsoft.IO.Redist) | >=4.6.0-preview.18571.3, <=6.0.0 | 6.0.1

## Advisory FAQ

### <a name="how-affected"></a>How do I know if I am affected?

If you have a runtime or SDK with a version listed,…

ICSA-25-135-02 — Siemens INTRALOG WMS

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability .NET Denial of Service Vulnerability .NET and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability .NET and Visual Studio Denial of Service Vulnerability .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Denial of Service Vulnerability

UBUNTU-CVE-2024-38081

Affected: Ubuntu:22.04:LTS: dotnet7

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

WID-SEC-W-2024-1560 — Microsoft .NET Framework: Mehrere Schwachstellen

Ein lokaler oder ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework und Microsoft Visual Studio 2022 ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen und eine Denial-of-Service-Situation zu erzeugen.