CVE-2024-35264

Published: Jul 9, 2024
Updated: May 4, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-35264" target="_blank" rel="noopener"> CVE-2024-35264
GHSA: <a href="https://github.com/advisories/GHSA-chfc-9w6m-75rf" target="_blank" rel="noopener"> GHSA-chfc-9w6m-75rf
Severity: High
Exploit:

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS v3:

CWEs:

Software	From	Fixed in
Microsoft.AspNetCore.App.Runtime.linux-arm	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.linux-arm64	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.linux-musl-arm	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.linux-musl-x64	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.linux-x64	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.osx-arm64	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.osx-x64	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.win-arm	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.win-arm64	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.win-x64	8.0.0	8.0.7
Microsoft.AspNetCore.App.Runtime.win-x86	8.0.0	8.0.7
microsoft / visual_studio_2022	17.10.0	17.10.4
microsoft / visual_studio_2022	17.8.0	17.8.12
microsoft / visual_studio_2022	17.6.0	17.6.17
microsoft / visual_studio_2022	17.4.0	17.4.21
microsoft / .net	8.0.0	8.0.7