PT-2024-26412 · Microsoft+8 · Visual Studio+9

Radek Zikmund · Published 2024-07-09 · Updated 2024-12-13 · CVE-2024-35264

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Critical

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio (affected versions not specified)

Description The issue concerns a remote code execution vulnerability. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited are provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2024:4450

ALSA-2024:4451

ALT-PU-2024-12832

ALT-PU-2024-12835

ALT-PU-2024-12836

ALT-PU-2024-13115

ALT-PU-2024-13119

ALT-PU-2024-13120

ALT-PU-2024-16799

ALT-PU-2024-16800

ALT-PU-2024-16801

BIT-DOTNET-2024-35264

BIT-DOTNET-SDK-2024-35264

CESA-2024_4451

CVE-2024-35264

GHSA-CHFC-9W6M-75RF

INFSA-2024_4450

INFSA-2024_4451

RHSA-2024:4450

RHSA-2024:4451

RHSA-2024_4450

RHSA-2024_4451

RLSA-2024:4450

RLSA-2024:4451

USN-6889-1

Affected Products

.Net Framework

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Ubuntu

Visual Studio

References · 57

• https://osv.dev/vulnerability/GHSA-chfc-9w6m-75rf · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:4450 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-35264 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-30105 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38095 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:4451 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:4450 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-4450.html · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35264 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6889-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-sdk-2024-35264 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/709868 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-4450.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35264 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-35264 · Security Note