VYPR
← All advisories
High severity7.3NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-38081

CVE-2024-38081

Description

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
Microsoft.IO.RedistNuGet
>= 4.6.0-preview.18571.3, < 6.0.16.0.1

Affected products

30
  • Microsoft/Net
    cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
    Range: >=6.0.0,<6.0.32
  • Microsoft/.net Framework21 versions
    cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*+ 20 more
    • cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*
    • (no CPE)range: 2.0.0
    • (no CPE)range: 3.0.0
    • (no CPE)range: 3.5.0
    • (no CPE)range: 4.7.0
    • (no CPE)range: 4.8.0
    • (no CPE)range: 4.8.1
    • (no CPE)range: 3.5.0
    • (no CPE)range: 4.7.0
    • (no CPE)range: 4.7.0
    • (no CPE)range: 10.0.0.0
    • (no CPE)range: 4.8.0
  • Microsoft/Visual Studio
    cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
    Range: >=17.4,<17.4.21
  • osv-coords3 versions
    pkg:bitnami/dotnetpkg:bitnami/dotnet-sdkpkg:nuget/microsoft.io.redist
    >= 6.0.0, < 6.0.32+ 2 more
    • (no CPE)range: >= 6.0.0, < 6.0.32
    • (no CPE)range: >= 6.0.0, < 6.0.32
    • (no CPE)range: >= 4.6.0-preview.18571.3, < 6.0.1
  • Microsoft/.NET 6.0v5
    Range: 6.0.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.4v5
    Range: 17.4.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.6v5
    Range: 17.6.0
  • Microsoft/Microsoft Visual Studio 2022 version 17.8v5
    Range: 17.8.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.