CVE-2022-24512

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

.NET and Visual Studio Remote Code Execution Vulnerability

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
MicrosoftMicrosoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)>= 16.0.0, < 16.7.26
MicrosoftMicrosoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)>= 15.0.0, < 16.9.18
MicrosoftMicrosoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)>= 16.11.0, < 16.11.11
MicrosoftMicrosoft Visual Studio 2022 version 17.0>= 17.0.0, < 17.0.7
Microsoft.NET 5.0>= 5.0.0, < 5.0.15
Microsoft.NET 6.0>= 6.0.0, < 6.0.3
Microsoft.NET Core 3.1>= 3.1, < 3.1.23
MicrosoftPowerShell 7.2>= 7.2.0, < 7.2.2
MicrosoftPowerShell 7.0>= 7.0.0, < 7.0.9
MicrosoftPowerShell 7.1>= 7.1.0, < 7.1.6

References

Timeline

Published
Mar 9, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-245137.8Visual Studio Elevation of Privilege VulnerabilityCVE-2022-245156.5Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-245168.0Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-245177.2Azure Site Recovery Remote Code Execution VulnerabilityCVE-2022-245186.5Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-245196.5Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-245207.2Azure Site Recovery Remote Code Execution VulnerabilityCVE-2022-245217.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2022-245226.5Skype Extension for Chrome Information Disclosure VulnerabilityCVE-2022-245234.3Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2022-245257.0Windows Update Stack Elevation of Privilege VulnerabilityCVE-2022-245266.1Visual Studio Code Spoofing Vulnerability
CVE-2022-24512: Medium severity, CVSS 6.3 | Vulnix