CVE-2022-24512 in Microsoft and Fedora Project Products
Published on March 9, 2022
.NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
Products Associated with CVE-2022-24512
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2022-24512 are published in these products:
Affected Versions
Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6):- Version 16.0.0 and below 16.7.26 is affected.
- Version 15.0.0 and below 16.9.18 is affected.
- Version 16.11.0 and below 16.11.11 is affected.
- Version 17.0.0 and below 17.0.7 is affected.
- Version 5.0.0 and below 5.0.15 is affected.
- Version 6.0.0 and below 6.0.3 is affected.
- Version 3.1 and below 3.1.23 is affected.
- Version 7.2.0 and below 7.2.2 is affected.
- Version 7.0.0 and below 7.0.9 is affected.
- Version 7.1.0 and below 7.1.6 is affected.
Vulnerable Packages
The following package name and versions may be associated with CVE-2022-24512
| Package Manager | Vulnerable Package | Versions | Fixed In |
|---|---|---|---|
| nuget | Microsoft.NETCore.App.Runtime.linux-arm | >= 3.0.0, < 3.1.23 | 3.1.23 |
| nuget | Microsoft.NETCore.App.Runtime.linux-arm64 | >= 3.0.0, < 3.1.23 | 3.1.23 |
| nuget | Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >= 3.0.0, < 3.1.23 | 3.1.23 |
| nuget | Microsoft.NETCore.App.Runtime.linux-musl-x64 | >= 3.0.0, < 3.1.23 | 3.1.23 |
| nuget | Microsoft.NETCore.App.Runtime.linux-x64 | >= 3.0.0, < 3.1.23 | 3.1.23 |
| nuget | Microsoft.NETCore.App.Runtime.osx-x64 | >= 3.0.0, < 3.1.23 | 3.1.23 |
| nuget | Microsoft.NETCore.App.Runtime.win-arm | >= 3.0.0, < 3.1.23 | 3.1.23 |
| nuget | Microsoft.NETCore.App.Runtime.win-arm64 | >= 3.0.0, < 3.1.23 | 3.1.23 |
| nuget | Microsoft.NETCore.App.Runtime.win-x64 | >= 3.0.0, < 3.1.23 | 3.1.23 |
| nuget | Microsoft.NETCore.App.Runtime.win-x86 | >= 3.0.0, < 3.1.23 | 3.1.23 |
| nuget | Microsoft.NETCore.App.Runtime.linux-arm | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.linux-arm64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.linux-musl-arm | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.linux-musl-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.linux-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.linux-arm | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.linux-arm64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.linux-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.osx-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.osx-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.win-arm | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.win-arm64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.win-x64 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.win-x86 | >= 5.0.0, < 5.0.15 | 5.0.15 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.linux-arm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.linux-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.linux-musl-arm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.linux-musl-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.linux-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-arm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.browser-wasm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.ios-arm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.ios-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.linux-arm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.linux-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.linux-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.osx-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.osx-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.win-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.Mono.win-x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.osx-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.osx-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.win-arm | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.win-arm64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.win-x64 | >= 6.0.0, < 6.0.3 | 6.0.3 |
| nuget | Microsoft.NETCore.App.Runtime.win-x86 | >= 6.0.0, < 6.0.3 | 6.0.3 |
Exploit Probability
EPSS
0.23%
Percentile
46.15%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.