← All advisories

High severityNVD Advisory· Published Jul 9, 2024· Updated Dec 9, 2025

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2024-38081

Description

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
Microsoft.IO.RedistNuGet	>= 4.6.0-preview.18571.3, < 6.0.1	6.0.1

Affected products

18

osv-coords3 versions
pkg:bitnami/dotnet pkg:bitnami/dotnet-sdk pkg:nuget/microsoft.io.redist
>= 6.0.0, < 6.0.32+ 2 more
- (no CPE)range: >= 6.0.0, < 6.0.32
- (no CPE)range: >= 6.0.0, < 6.0.32
- (no CPE)range: >= 4.6.0-preview.18571.3, < 6.0.1
Microsoft/.net Frameworkcpe-rescue11 versions
2.0.0+ 10 more
- (no CPE)range: 2.0.0
- (no CPE)range: 3.0.0
- (no CPE)range: 3.5.0
- (no CPE)range: 3.5.0
- (no CPE)range: 4.7.0
- (no CPE)range: 4.8.0
- (no CPE)range: 4.8.1
- (no CPE)range: 4.7.0
- (no CPE)range: 4.7.0
- (no CPE)range: 10.0.0.0
- (no CPE)range: 4.8.0
Microsoft/Microsoft Visual Studio 2022 version 17.4v5
Range: 17.4.0
Microsoft/Microsoft Visual Studio 2022 version 17.6v5
Range: 17.6.0
Microsoft/Microsoft Visual Studio 2022 version 17.8v5
Range: 17.8.0
Microsoft/.NET 6.0v5
Range: 6.0.0

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-hq7w-xv5x-g34jghsaADVISORY
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38081ghsavendor-advisoryWEB
nvd.nist.gov/vuln/detail/CVE-2024-38081ghsaADVISORY
github.com/dotnet/runtime/security/advisories/GHSA-hq7w-xv5x-g34jghsaWEB

News mentions

0

No linked articles in our index yet.