First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-34716

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

.NET Spoofing Vulnerability

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	>= 15.9.0, < 15.9.50
Microsoft	Microsoft Visual Studio 2022 version 17.2	>= 17.2.0, < 17.2.7
Microsoft	Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)	>= 15.0.0, < 16.9.24
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	>= 16.11.0, < 16.11.18
Microsoft	Microsoft Visual Studio 2022 version 17.0	>= 17.0.0, < 17.0.13
Microsoft	.NET 6.0	>= 6.0.0, < 6.0.8
Microsoft	.NET Core 3.1	>= 3.1, < 3.1.28
Microsoft	PowerShell 7.0	>= 7.0.0, < 7.0.12
Microsoft	PowerShell 7.2	>= 7.2.0, < 7.2.6

References

Timeline

Published: Aug 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-347178.8Microsoft Office Remote Code Execution Vulnerability CVE-2022-347189.8Windows TCP/IP Remote Code Execution Vulnerability CVE-2022-347197.8Windows Distributed File System (DFS) Elevation of Privilege Vulnerability CVE-2022-34724.9A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some CVE-2022-347207.5Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability CVE-2022-347219.8Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability CVE-2022-347229.8Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability CVE-2022-347235.5Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability CVE-2022-347247.5Windows DNS Server Denial of Service Vulnerability CVE-2022-347257.0Windows ALPC Elevation of Privilege Vulnerability CVE-2022-347268.8Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-347278.8Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2022-34716: Medium severity, CVSS 5.9 | Vulnix