CVE-2022-41032
NuGet Client Elevation of Privilege Vulnerability
HIGH 7.8EPSS 1.3%
NuGet Client Elevation of Privilege Vulnerability
- Affected
- Microsoft · .NET 6.0 · .NET Core 3.1 · Microsoft Visual Studio 2022 version 17.2 · Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) · Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) · Microsoft Visual Studio 2022 version 17.0
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.29% chance of exploitation in the next 30 days, 70th percentile
- Published
- 2022-10-11
- Updated
- 2025-02-28
Proof-of-concept exploits (1)
- ethomson/cve-2022-410321★ · 2022-06-10
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41032
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/…
- advisories/GHSA-g3q9-xf95-8hp5