9.8

CVE-2024-0057

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MicrosoftPowershell Version >= 7.2 < 7.2.18
MicrosoftPowershell Version >= 7.3 < 7.3.11
MicrosoftPowershell Version7.4 Update-
MicrosoftVisual Studio 2022 Version >= 17.2 < 17.2.23
MicrosoftVisual Studio 2022 Version >= 17.4 < 17.4.15
MicrosoftVisual Studio 2022 Version >= 17.6 < 17.6.11
MicrosoftVisual Studio 2022 Version >= 17.8 < 17.8.4
Microsoft.Net Framework Version >= 4.8 < 4.8.04690.02
   MicrosoftWindows 10 1607 Version- HwPlatformx64
   MicrosoftWindows 10 1607 Version- HwPlatformx86
   MicrosoftWindows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
   MicrosoftWindows Server 2016 Version-
Microsoft.Net Framework Version >= 4.8 < 4.8.04690.01
   MicrosoftWindows Server 2008 Versionr2 Updatesp1 HwPlatformx64
Microsoft.Net Framework Version4.6.2
   MicrosoftWindows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
Microsoft.Net Framework Version4.7
   MicrosoftWindows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
Microsoft.Net Framework Version4.7.1
   MicrosoftWindows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
Microsoft.Net Framework Version4.7.2
   MicrosoftWindows Server 2008 Versionr2 Updatesp1 HwPlatformx64
   MicrosoftWindows Server 2012 Version-
   MicrosoftWindows Server 2012 Versionr2
Microsoft.Net Framework Version3.5
   MicrosoftWindows 10 1809 Version- HwPlatformx64
   MicrosoftWindows 10 1809 Version- HwPlatformx86
   MicrosoftWindows 10 21h2 Version- HwPlatformarm64
   MicrosoftWindows 10 21h2 Version- HwPlatformx64
   MicrosoftWindows 10 21h2 Version- HwPlatformx86
   MicrosoftWindows 10 22h2 Version- HwPlatformarm64
   MicrosoftWindows 10 22h2 Version- HwPlatformx64
   MicrosoftWindows 10 22h2 Version- HwPlatformx86
   MicrosoftWindows 11 21h2 Version- HwPlatformarm64
   MicrosoftWindows 11 21h2 Version- HwPlatformx64
   MicrosoftWindows 11 22h2 Version- HwPlatformarm64
   MicrosoftWindows 11 22h2 Version- HwPlatformx64
   MicrosoftWindows 11 23h2 Version- HwPlatformarm64
   MicrosoftWindows 11 23h2 Version- HwPlatformx64
   MicrosoftWindows Server 2019 Version-
   MicrosoftWindows Server 2022 Version-
   MicrosoftWindows Server 2022 23h2 Version-
Microsoft.Net Framework Version4.8.1
   MicrosoftWindows 10 1809 Version- HwPlatformx64
   MicrosoftWindows 10 1809 Version- HwPlatformx86
   MicrosoftWindows 10 21h2 Version- HwPlatformarm64
   MicrosoftWindows 10 21h2 Version- HwPlatformx64
   MicrosoftWindows 10 21h2 Version- HwPlatformx86
   MicrosoftWindows 10 22h2 Version- HwPlatformarm64
   MicrosoftWindows 10 22h2 Version- HwPlatformx64
   MicrosoftWindows 10 22h2 Version- HwPlatformx86
   MicrosoftWindows 11 21h2 Version- HwPlatformarm64
   MicrosoftWindows 11 21h2 Version- HwPlatformx64
   MicrosoftWindows 11 22h2 Version- HwPlatformarm64
   MicrosoftWindows 11 22h2 Version- HwPlatformx64
   MicrosoftWindows 11 23h2 Version- HwPlatformarm64
   MicrosoftWindows 11 23h2 Version- HwPlatformx64
   MicrosoftWindows Server 2019 Version-
   MicrosoftWindows Server 2022 Version-
   MicrosoftWindows Server 2022 23h2 Version-
Microsoft.Net Framework Version >= 4.8 < 4.8.04690.02
   MicrosoftWindows 10 1809 Version- HwPlatformx64
   MicrosoftWindows 10 1809 Version- HwPlatformx86
   MicrosoftWindows 10 21h2 Version- HwPlatformarm64
   MicrosoftWindows 10 21h2 Version- HwPlatformx64
   MicrosoftWindows 10 21h2 Version- HwPlatformx86
   MicrosoftWindows 10 22h2 Version- HwPlatformarm64
   MicrosoftWindows 10 22h2 Version- HwPlatformx64
   MicrosoftWindows 10 22h2 Version- HwPlatformx86
   MicrosoftWindows 11 21h2 Version- HwPlatformarm64
   MicrosoftWindows 11 21h2 Version- HwPlatformx64
   MicrosoftWindows 11 22h2 Version- HwPlatformarm64
   MicrosoftWindows 11 22h2 Version- HwPlatformx64
   MicrosoftWindows Server 2019 Version-
   MicrosoftWindows Server 2022 Version-
   MicrosoftWindows Server 2022 23h2 Version-
Microsoft.Net Framework Version3.5
   MicrosoftWindows 10 1809 Version- HwPlatformx64
   MicrosoftWindows 10 1809 Version- HwPlatformx86
   MicrosoftWindows 10 21h2 Version- HwPlatformarm64
   MicrosoftWindows 10 21h2 Version- HwPlatformx64
   MicrosoftWindows 10 21h2 Version- HwPlatformx86
   MicrosoftWindows 10 22h2 Version- HwPlatformarm64
   MicrosoftWindows 10 22h2 Version- HwPlatformx64
   MicrosoftWindows 10 22h2 Version- HwPlatformx86
   MicrosoftWindows 11 21h2 Version- HwPlatformarm64
   MicrosoftWindows 11 21h2 Version- HwPlatformx64
   MicrosoftWindows 11 22h2 Version- HwPlatformarm64
   MicrosoftWindows 11 22h2 Version- HwPlatformx64
   MicrosoftWindows Server 2019 Version-
   MicrosoftWindows Server 2022 Version-
   MicrosoftWindows Server 2022 23h2 Version-
Microsoft.Net Framework Version3.5
   MicrosoftWindows 10 1607 Version- HwPlatformx64
   MicrosoftWindows 10 1607 Version- HwPlatformx86
   MicrosoftWindows 10 1809 Version- HwPlatformarm64
   MicrosoftWindows 10 1809 Version- HwPlatformx64
   MicrosoftWindows 10 1809 Version- HwPlatformx86
   MicrosoftWindows Server 2016 Version-
   MicrosoftWindows Server 2019 Version-
Microsoft.Net Framework Version4.7.2
   MicrosoftWindows 10 1607 Version- HwPlatformx64
   MicrosoftWindows 10 1607 Version- HwPlatformx86
   MicrosoftWindows 10 1809 Version- HwPlatformarm64
   MicrosoftWindows 10 1809 Version- HwPlatformx64
   MicrosoftWindows 10 1809 Version- HwPlatformx86
   MicrosoftWindows Server 2016 Version-
   MicrosoftWindows Server 2019 Version-
Microsoft.Net Framework Version2.0 Updatesp2
   MicrosoftWindows Server 2008 Version- Updatesp2 HwPlatformx64
   MicrosoftWindows Server 2008 Version- Updatesp2 HwPlatformx86
Microsoft.Net Framework Version3.0 Updatesp2
   MicrosoftWindows Server 2008 Version- Updatesp2 HwPlatformx64
   MicrosoftWindows Server 2008 Version- Updatesp2 HwPlatformx86
Microsoft.Net Version >= 6.0.0 < 6.0.26
Microsoft.Net Version >= 7.0.0 < 7.0.15
Microsoft.Net Version8.0.0 Update-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.35% 0.842
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
secure@microsoft.com 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.