VYPR
← All advisories
High severity7.3NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026

CVE-2024-21409

CVE-2024-21409

Description

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
Microsoft.WindowsDesktop.App.Runtime.win-arm64NuGet
< 6.0.296.0.29
Microsoft.WindowsDesktop.App.Runtime.win-arm64NuGet
>= 8.0.0, < 8.0.48.0.4
Microsoft.WindowsDesktop.App.Runtime.win-arm64NuGet
>= 7.0.0, < 7.0.187.0.18
Microsoft.WindowsDesktop.App.Runtime.win-x64NuGet
< 6.0.296.0.29
Microsoft.WindowsDesktop.App.Runtime.win-x64NuGet
>= 8.0.0, < 8.0.48.0.4
Microsoft.WindowsDesktop.App.Runtime.win-x64NuGet
>= 7.0.0, < 7.0.187.0.18
Microsoft.WindowsDesktop.App.Runtime.win-x86NuGet
>= 7.0.0, < 7.0.187.0.18
Microsoft.WindowsDesktop.App.Runtime.win-x86NuGet
>= 8.0.0, < 8.0.48.0.4
Microsoft.WindowsDesktop.App.Runtime.win-x86NuGet
< 6.0.296.0.29

Affected products

33
  • Microsoft/Microsoft Visual Studio 2022 version 17.9v5
    Range: 17.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.4v5
    Range: 17.4.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.6v5
    Range: 17.6.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.8v5
    Range: 17.8.0
  • Microsoft/.NET 6.0v5
    Range: 6.0.0
  • Microsoft/.NET 7.0v5
    Range: 7.0.0
  • Microsoft/.NET 8.0v5
    Range: 8.0
  • ghsa-coords6 versions
    pkg:nuget/microsoft.windowsdesktop.app.runtime.win-arm64pkg:nuget/microsoft.windowsdesktop.app.runtime.win-x64pkg:nuget/microsoft.windowsdesktop.app.runtime.win-x86pkg:bitnami/dotnetpkg:bitnami/dotnet-sdkpkg:bitnami/powershell
    < 6.0.29+ 5 more
    • (no CPE)range: < 6.0.29
    • (no CPE)range: < 6.0.29
    • (no CPE)range: >= 7.0.0, < 7.0.18
    • (no CPE)range: >= 6.0.0, < 6.0.29
    • (no CPE)range: >= 6.0.0, < 6.0.29
    • (no CPE)range: >= 7.2.0, < 7.2.19
  • Microsoft/Powershellcpe-rescue4 versions
    7.3.0+ 3 more
    • (no CPE)range: 7.3.0
    • (no CPE)range: 7.4.0
    • (no CPE)range: 7.2.0
    • cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*range: >=7.2,<7.2.19
  • Microsoft/.net Frameworkcpe-rescue14 versions
    4.7.0+ 13 more
    • (no CPE)range: 4.7.0
    • (no CPE)range: 4.8.1
    • (no CPE)range: 4.8.0
    • (no CPE)range: 4.8.0
    • (no CPE)range: 4.7.0
    • (no CPE)range: 4.7.0
    • cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
  • Microsoft/Net
    cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
    Range: >=6.0.0,<6.0.29
  • Microsoft/Visual Studio
    cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
    Range: >=17.4.0,<17.4.18

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.