Skip to content
Fencer Vulns
medium 6.3

CVE-2022-24512 json

.NET and Visual Studio Remote Code Execution Vulnerability

published 2022-03-09 4 y ago modified 2026-09-08 2 mo ago also BIT-dotnet-2022-24512 , BIT-dotnet-sdk-2022-24512 , BIT-powershell-2022-24512 , EUVD-2022-7074 , GHSA-c6w8-7mp3-34j9

cvss
6.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.6%
EPSS 1.6% chance of exploitation in 30 days, percentile 76%
public exploits
0
none known

Summary

.NET and Visual Studio Remote Code Execution Vulnerability

Patch / fix

  • nuget Microsoft.NETCore.App.Runtime.linux-arm 3.1.23, 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.linux-arm64 3.1.23, 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.linux-musl-arm64 3.1.23, 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.linux-musl-x64 3.1.23, 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.linux-x64 3.1.23, 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.osx-x64 3.1.23, 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.win-arm 3.1.23, 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.win-arm64 3.1.23, 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.win-x64 3.1.23, 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.win-x86 3.1.23, 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.linux-musl-arm 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.linux-arm 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.linux-arm64 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.linux-x64 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.Mono.osx-x64 5.0.15, 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 6.0.3
  • nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 6.0.3
  • rh-dotnet50-dotnet RHEL 5.0 DOTNET 5.0.212-1.el7_9
  • rh-dotnet50-dotnet-host RHEL 5.0 DOTNET 5.0.15-1.el7_9
  • rh-dotnet50-dotnet-sdk-5.0 RHEL 5.0 DOTNET 5.0.212-1.el7_9
  • rh-dotnet50-dotnet-hostfxr-5.0 RHEL 5.0 DOTNET 5.0.15-1.el7_9
  • rh-dotnet50-dotnet-runtime-5.0 RHEL 5.0 DOTNET 5.0.15-1.el7_9
  • rh-dotnet50-dotnet-templates-5.0 RHEL 5.0 DOTNET 5.0.212-1.el7_9
  • rh-dotnet50-aspnetcore-runtime-5.0 RHEL 5.0 DOTNET 5.0.15-1.el7_9
  • rh-dotnet50-dotnet-apphost-pack-5.0 RHEL 5.0 DOTNET 5.0.15-1.el7_9

red hat advisories RHSA-2022:0828RHSA-2022:0829RHSA-2022:0830RHSA-2022:0827RHSA-2022:0826RHSA-2022:0832

  • dotnet-sdk-5.0 AlmaLinux 8 5.0.212-1.el8_5
  • dotnet-hostfxr-5.0 AlmaLinux 8 5.0.15-1.el8_5
  • dotnet-runtime-5.0 AlmaLinux 8 5.0.15-1.el8_5
  • dotnet-templates-5.0 AlmaLinux 8 5.0.212-1.el8_5
  • aspnetcore-runtime-5.0 AlmaLinux 8 5.0.15-1.el8_5
  • dotnet-apphost-pack-5.0 AlmaLinux 8 5.0.15-1.el8_5
  • dotnet-targeting-pack-5.0 AlmaLinux 8 5.0.15-1.el8_5
  • aspnetcore-targeting-pack-5.0 AlmaLinux 8 5.0.15-1.el8_5

almalinux advisories ALSA-2022:0830ALSA-2022:0827ALSA-2022:0826

  • dotnet5.0 Rocky Linux 8 5.0.212-1.el8_5
  • dotnet3.1 Rocky Linux 8 3.1.417-1.el8_5
  • dotnet6.0 Rocky Linux 8 6.0.103-4.el8_5

rocky linux advisories RLSA-2022:0830RLSA-2022:0827RLSA-2022:0826

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-24512 updated cvss 6.3

dotnet: double parser stack buffer overrun

  • Red Hat .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet31-dotnet 3.1.417-1.el7_9, rh-dotnet50-dotnet 5.0.212-1.el7_9, rh-dotnet60-dotnet 6.0.103-3.el7_9, rh-dotnet60-dotnet-host 6.0.3-3.el7_9, rh-dotnet31-dotnet-host 3.1.23-1.el7_9, rh-dotnet50-dotnet-host 5.0.15-1.el7_9, +30 more Red Hat .NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet31-dotnet 3.1.417-1.el7_9, rh-dotnet50-dotnet 5.0.212-1.el7_9, rh-dotnet60-dotnet 6.0.103-3.el7_9, rh-dotnet60-dotnet-host 6.0.3-3.el7_9, rh-dotnet31-dotnet-host 3.1.23-1.el7_9, rh-dotnet50-dotnet-host 5.0.15-1.el7_9, +30 more Red Hat .NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet31-dotnet 3.1.417-1.el7_9, rh-dotnet50-dotnet 5.0.212-1.el7_9, rh-dotnet60-dotnet 6.0.103-3.el7_9, rh-dotnet60-dotnet-host 6.0.3-3.el7_9, rh-dotnet31-dotnet-host 3.1.23-1.el7_9, rh-dotnet50-dotnet-host 5.0.15-1.el7_9, +30 more
    fixed: vendor fix RHSA-2022:0829
  • Red Hat CodeReady Linux Builder (v. 8) dotnet-sdk-3.1-source-built-artifacts 3.1.417-1.el8_5, dotnet-sdk-5.0-source-built-artifacts 5.0.212-1.el8_5 Red Hat Enterprise Linux AppStream (v. 8) dotnet 6.0.103-4.el8_5, dotnet-host 6.0.3-4.el8_5, dotnet3.1 3.1.417-1.el8_5, dotnet5.0 5.0.212-1.el8_5, dotnet6.0 6.0.103-4.el8_5, dotnet-sdk-3.1 3.1.417-1.el8_5, +24 more
    fixed: vendor fix RHSA-2022:0827

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
17 mo ago

Exploit prediction

1.61% chance of exploitation in the next 30 days, higher than 76% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
GitHub 3.1 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CNA 3.1 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
NVD 2.0 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P
OSV 3.1 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected packages

ecosystem package affected fixed in
nuget Microsoft.NETCore.App.Runtime.linux-arm
>=3.0.0, <3.1.23
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
3.1.23
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.linux-arm64
>=3.0.0, <3.1.23
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
3.1.23
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.linux-musl-arm64
>=3.0.0, <3.1.23
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
3.1.23
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.linux-musl-x64
>=3.0.0, <3.1.23
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
3.1.23
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.linux-x64
>=3.0.0, <3.1.23
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
3.1.23
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.osx-x64
>=3.0.0, <3.1.23
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
3.1.23
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.win-arm
>=3.0.0, <3.1.23
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
3.1.23
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.win-arm64
>=3.0.0, <3.1.23
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
3.1.23
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.win-x64
>=3.0.0, <3.1.23
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
3.1.23
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.win-x86
>=3.0.0, <3.1.23
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
3.1.23
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.linux-musl-arm
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.linux-arm
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.linux-arm64
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.linux-x64
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.osx-x64
>=5.0.0, <5.0.15
>=6.0.0, <6.0.3
5.0.15
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-arm
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.browser-wasm
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.ios-arm
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.ios-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.osx-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvos-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.win-x64
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.Mono.win-x86
>=6.0.0, <6.0.3
6.0.3
nuget Microsoft.NETCore.App.Runtime.osx-arm64
>=6.0.0, <6.0.3
6.0.3
bitnami dotnet
>=5.0.0, <5.0.1
>=6.0.0, <6.0.1
5.0.1
6.0.1
bitnami dotnet-sdk
>=5.0.0, <5.0.1
>=6.0.0, <6.0.1
5.0.1
6.0.1
bitnami powershell
>=7.0.0, <7.0.9
>=7.1.0, <7.1.6
>=7.2.0, <7.2.2
7.0.9
7.1.6
7.2.2

Affected products

  • Microsoft Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
  • Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
  • Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
  • Microsoft Microsoft Visual Studio 2022 version 17.0
  • Microsoft .NET 5.0
  • Microsoft .NET 6.0
  • Microsoft .NET Core 3.1
  • Microsoft PowerShell 7.2
  • Microsoft PowerShell 7.0
  • Microsoft PowerShell 7.1

Classification

Weakness
  • CWE-94 Improper Control of Generation of Code

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.