CVE-2024-21392

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

.NET and Visual Studio Denial of Service Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

VendorProductVersions
MicrosoftMicrosoft Visual Studio 2022 version 17.9>= 17.0, < 17.9.3
MicrosoftPowerShell 7.3>= 7.3.0, < 7.3.12
MicrosoftPowerShell 7.4>= 7.4.0, < 7.4.1
Microsoft.NET 7.0>= 7.0.0, < 7.0.17
Microsoft.NET 8.0>= 8.0, < 8.0.3
MicrosoftMicrosoft Visual Studio 2022 version 17.6>= 17.6.0, < 17.6.13
MicrosoftMicrosoft Visual Studio 2022 version 17.4>= 17.4.0, < 17.4.17
MicrosoftMicrosoft Visual Studio 2022 version 17.8>= 17.8.0, < 17.8.8

References

Timeline

Published
Mar 12, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-213937.6Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2024-213947.6Dynamics 365 Field Service Spoofing VulnerabilityCVE-2024-213958.2Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2024-213967.6Dynamics 365 Sales Spoofing VulnerabilityCVE-2024-213975.3Microsoft Azure File Sync Elevation of Privilege VulnerabilityCVE-2024-213988.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-213998.3Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2024-21405.4The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Icons widgeCVE-2024-214009.0Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege VulnerabilityCVE-2024-214019.8Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege VulnerabilityCVE-2024-214027.1Microsoft Outlook Elevation of Privilege VulnerabilityCVE-2024-214039.0Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
CVE-2024-21392: High severity, CVSS 7.5 | Vulnix