CVE-2024-21409

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Affected

Microsoft · Microsoft Visual Studio 2022 version 17.9 · Microsoft Visual Studio 2022 version 17.4 · Microsoft Visual Studio 2022 version 17.6 · Microsoft Visual Studio 2022 version 17.8 · PowerShell 7.3 · PowerShell 7.4

CVSS v3.1 MICROSOFT

7.3 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

2.51% chance of exploitation in the next 30 days, 85th percentile

Published

2024-04-09

Updated

2025-05-03

Proof-of-concept exploits (1)

• vkairy/cve-2024-21409-repro1★ · 2025-02-12

Security advisories

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21409
• advisories/GHSA-6qmx-42h2-j8h6

References

• CVE Record
• NVD entry