CVE-2024-29059

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

.NET Framework Information Disclosure Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-209

Affected software

No affected versions have been published.

Timeline

Published
Mar 23, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Feb 4, 2025
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-29066.5Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.CVE-2024-290606.7Visual Studio Elevation of Privilege VulnerabilityCVE-2024-290617.8Secure Boot Security Feature Bypass VulnerabilityCVE-2024-290627.1Secure Boot Security Feature Bypass VulnerabilityCVE-2024-290635.5Azure AI Search Information Disclosure VulnerabilityCVE-2024-290645.5Windows Hyper-V Denial of Service VulnerabilityCVE-2024-290667.2Windows Distributed File System (DFS) Remote Code Execution VulnerabilityCVE-2024-290686.6In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-sysCVE-2024-290697.3In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format iCVE-2024-29076.8The AGCA WordPress plugin before 7.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as adCVE-2024-290709.1On versions before 2.1.4, session is not invalidated after logout. When the user logged in successfully, the Backend service returns "AuthorCVE-2024-290718.8HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may change th
CVE-2024-29059: High severity, CVSS 7.5 | Vulnix