CVE-2024-21409

Published: Apr 9, 2024
Updated: May 4, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-21409" target="_blank" rel="noopener"> CVE-2024-21409
GHSA: <a href="https://github.com/advisories/GHSA-6qmx-42h2-j8h6" target="_blank" rel="noopener"> GHSA-6qmx-42h2-j8h6
Severity: High
Exploit:

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVSS v3:

CWEs:

Software	From	Fixed in
Microsoft.WindowsDesktop.App.Runtime.win-arm64	-	6.0.29
Microsoft.WindowsDesktop.App.Runtime.win-arm64	8.0.0	8.0.4
Microsoft.WindowsDesktop.App.Runtime.win-arm64	7.0.0	7.0.18
Microsoft.WindowsDesktop.App.Runtime.win-x64	-	6.0.29
Microsoft.WindowsDesktop.App.Runtime.win-x64	8.0.0	8.0.4
Microsoft.WindowsDesktop.App.Runtime.win-x64	7.0.0	7.0.18
Microsoft.WindowsDesktop.App.Runtime.win-x86	7.0.0	7.0.18
Microsoft.WindowsDesktop.App.Runtime.win-x86	8.0.0	8.0.4
Microsoft.WindowsDesktop.App.Runtime.win-x86	-	6.0.29
microsoft / .net_framework	3.5	3.5.x
microsoft / .net_framework	4.8.1	4.8.1.x
microsoft / powershell	7.3	7.3.12
microsoft / powershell	7.4	7.4.2
microsoft / .net	6.0.0	6.0.29
microsoft / .net	7.0.0	7.0.18
microsoft / .net	8.0.0	8.0.4
microsoft / visual_studio_2022	17.9.0	17.9.6
microsoft / visual_studio_2022	17.4.0	17.4.18
microsoft / visual_studio_2022	17.6.0	17.6.14
microsoft / visual_studio_2022	17.8.0	17.8.9
microsoft / powershell	7.2	7.2.19
microsoft / .net_framework	4.7.2	4.7.2.x
microsoft / .net_framework	4.8	4.8.x
microsoft / .net_framework	4.6.2	4.6.2.x
microsoft / .net_framework	4.7	4.7.x
microsoft / .net_framework	4.7.1	4.7.1.x