CVE-2024-35264

—

CVSS 3.1

8.1 high

EPSS

3%p84

Published

Jul 9, 2024 (Jul 9, 2024)

Modified

Jun 17, 2026

Description

.NET and Visual Studio Remote Code Execution Vulnerability

Vendors: microsoft
Products: .net, visual studio 2022
Weakness: CWE-416
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news4 stories

Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited

The Hacker NewsJul 11, 09:02 UTC · Jul 11, 2024Vulnerability in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-37985+3 CVEs

60

Microsoft Fixes Four Zero

Infosecurity MagazineJul 10, 09:40 UTC · Jul 10, 2024Exploit / PoC in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-35264+6 CVEs

60

Microsoft Patch Tuesday for July 2024 fixed 2 actively exploited zero

Security AffairsJul 10, 08:48 UTC · Jul 10, 2024Vulnerability in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-37985+1 CVEs

60

Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)

Help Net SecurityJul 9, 00:00 UTC · Jul 9, 2024Vulnerability in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-35264+5 CVEs

60