Jul 2024: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2024-38081 Published on July 9, 2024

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Github Repository Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

NO

Technical Impact:

TOTAL

Weakness Type

What is an insecure temporary file Vulnerability?

The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

CVE-2024-38081 has been classified to as an insecure temporary file vulnerability or weakness.

Products Associated with CVE-2024-38081

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Visual Studio 2022

  Watch

Microsoft Net

  Watch

Microsoft .NET Framework

  Watch

Microsoft Visual Studio

  Watch

Affected Versions

• Version 17.4.0 and below 17.4.21 is affected.

• Version 17.6.0 and below 17.6.17 is affected.

• Version 17.8.0 and below 17.8.12 is affected.

• Version 6.0.0 and below 6.0.32 is affected.

• Version 4.7.0 and below 4.7.4101.02 is affected.

• Version 4.8.1 and below 4.8.1.9256.03 is affected.

• Version 4.7.0 and below 4.7.4101.01 is affected.

• Version 10.0.0.0 and below 10.0.10240.20710 is affected.

• Version 2.0.0 and below 2.0.50727.8977 is affected.

• Version 3.0.0 and below 2.0.50727.8977 is affected.

• Version 3.5.0 and below 3.5.30729.8972 is affected.

• Version 3.5.0 and below 3.5.30729.8971 is affected.

• Version 4.8.0 and below 4.8.04739.02 is affected.

• Version 4.8.0 and below 4.8.4739.04 is affected.

• Version 4.7.0 and below 4.7.2.4101.03 is affected.

Vulnerable Packages

The following package name and versions may be associated with CVE-2024-38081

Exploit Probability