CVE-2022-24512
Medium
Description
.NET and Visual Studio Remote Code Execution Vulnerability
SeverityMedium
CVSS6.3
Exploit probability—
Product
Microsoft .net
PublishedMar 9, 2022
First seenMar 9, 2022
Weakness typeCWE-94Code injection
How to fix
Update
- microsoft powershell7.0.9, 7.1.6, 7.2.2 or later
- microsoft visual_studio_201916.7.26, 16.9.18, 16.11.11 or later
- microsoft visual_studio_202217.0.7 or later
- Microsoft.NETCore.App.Runtime.linux-arm3.1.23, 5.0.15, 6.0.3 or later
- Microsoft.NETCore.App.Runtime.linux-arm643.1.23, 5.0.15, 6.0.3 or later
- Microsoft.NETCore.App.Runtime.linux-musl-arm643.1.23, 5.0.15, 6.0.3 or later
- Microsoft.NETCore.App.Runtime.linux-musl-x643.1.23, 5.0.15, 6.0.3 or later
- Microsoft.NETCore.App.Runtime.linux-x643.1.23, 5.0.15, 6.0.3 or later
- Microsoft.NETCore.App.Runtime.osx-x643.1.23, 5.0.15, 6.0.3 or later
- Microsoft.NETCore.App.Runtime.win-arm3.1.23, 5.0.15, 6.0.3 or later
- Microsoft.NETCore.App.Runtime.win-arm643.1.23, 5.0.15, 6.0.3 or later
- Microsoft.NETCore.App.Runtime.win-x643.1.23, 5.0.15, 6.0.3 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft .net | 5.0, 6.0.0 | — |
| microsoft .net_core | 3.1 | — |
| microsoft powershell | 7.0 ≤ v < 7.0.9, 7.1 ≤ v < 7.1.6, 7.2 ≤ v < 7.2.2 | 7.0.9, 7.1.6, 7.2.2 |
| microsoft visual_studio_2019 | 16.0 ≤ v ≤ 16.6.4, 16.7.0 ≤ v < 16.7.26, 16.8.0 ≤ v ≤ 16.8.7, 16.9.0 ≤ v < 16.9.18, 16.10.0 ≤ v ≤ 16.10.4, 16.11.0 ≤ v < 16.11.11 | 16.7.26, 16.9.18, 16.11.11 |
| microsoft visual_studio_2022 | 17.0 ≤ v < 17.0.7 | 17.0.7 |
| fedoraproject fedora | 34, 35, 36 | — |
| Microsoft.NETCore.App.Runtime.linux-armNuGet | 3.0.0 ≤ v < 3.1.23, 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 3.1.23, 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.linux-arm64NuGet | 3.0.0 ≤ v < 3.1.23, 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 3.1.23, 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet | 3.0.0 ≤ v < 3.1.23, 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 3.1.23, 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet | 3.0.0 ≤ v < 3.1.23, 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 3.1.23, 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.linux-x64NuGet | 3.0.0 ≤ v < 3.1.23, 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 3.1.23, 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.osx-x64NuGet | 3.0.0 ≤ v < 3.1.23, 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 3.1.23, 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.win-armNuGet | 3.0.0 ≤ v < 3.1.23, 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 3.1.23, 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.win-arm64NuGet | 3.0.0 ≤ v < 3.1.23, 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 3.1.23, 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.win-x64NuGet | 3.0.0 ≤ v < 3.1.23, 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 3.1.23, 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.win-x86NuGet | 3.0.0 ≤ v < 3.1.23, 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 3.1.23, 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.linux-musl-armNuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.linux-armNuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.linux-arm64NuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64NuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.linux-x64NuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64NuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64NuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64NuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64NuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64NuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64NuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.osx-x64NuGet | 5.0.0 ≤ v < 5.0.15, 6.0.0 ≤ v < 6.0.3 | 5.0.15, 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-armNuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasmNuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-armNuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasmNuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-armNuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-armNuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasmNuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-armNuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasmNuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.ios-armNuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.osx-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.win-x64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.Mono.win-x86NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
| Microsoft.NETCore.App.Runtime.osx-arm64NuGet | 6.0.0 ≤ v < 6.0.3 | 6.0.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.