PT-2024-1118 · Microsoft+7 · Visual Studio+9

Anita Gaud + 2 · Published 2024-01-09 · Updated 2026-03-10 · CVE-2024-0057

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, and Visual Studio versions prior to the fixed version

Description A security-feature bypass issue affects .NET, .NET Framework, and Visual Studio, allowing remote attackers to bypass existing security restrictions. This issue is related to errors in security settings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-254

CWE-20

Related Identifiers

ALSA-2024:0150

ALSA-2024:0151

ALSA-2024:0152

ALSA-2024:0156

ALSA-2024:0157

ALSA-2024:0158

ALT-PU-2024-13117

ALT-PU-2024-13118

ALT-PU-2024-16742

ALT-PU-2024-16744

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16796

ALT-PU-2024-16939

ALT-PU-2024-2554

ALT-PU-2024-2556

ALT-PU-2024-2557

ALT-PU-2024-5998

ALT-PU-2024-6034

ALT-PU-2025-2023

BDU:2024-00402

BIT-DOTNET-2024-0057

BIT-DOTNET-SDK-2024-0057

BIT-POWERSHELL-2024-0057

CESA-2024_0150

CESA-2024_0157

CESA-2024_0158

CVE-2024-0057

GHSA-68W7-72JG-6QPP

GHSA-JW42-5M4V-9C8G

RHSA-2024:0150

RHSA-2024:0151

RHSA-2024:0152

RHSA-2024:0156

RHSA-2024:0157

RHSA-2024:0158

RHSA-2024:0255

RHSA-2024_0150

RHSA-2024_0151

RHSA-2024_0152

RHSA-2024_0156

RHSA-2024_0157

RHSA-2024_0158

RLSA-2024:0157

RLSA-2024:0158

USN-6578-1

Affected Products

.Net Framework

Alt Linux

Almalinux

Centos

Linuxmint

Net

Red Hat

Red Os

Ubuntu

Visual Studio

References · 75

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6578-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0158.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-0156.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:0150 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-0157.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-68w7-72jg-6qpp · Vendor Advisory
• https://osv.dev/vulnerability/USN-6578-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-0057 · Security Note
• https://bdu.fstec.ru/vul/2024-00402 · Security Note
• https://osv.dev/vulnerability/BIT-dotnet-sdk-2024-0057 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:0152 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0151.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0157.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0150.html · Vendor Advisory