CVE-2024-21409: Microsoft .net

High severity, CVSS 7.3. EPSS: 2.5% chance of exploitation in the next 30 days.

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Affected products

• Microsoft .net: from 6.0.0, before 6.0.29 (fixed in 6.0.29); from 7.0.0, before 7.0.18 (fixed in 7.0.18); from 8.0.0, before 8.0.4 (fixed in 8.0.4)
• Microsoft .NET Framework: version 3.5 only; version 4.8.1 only; version 4.7.2 only; version 4.8 only; version 4.6.2 only; version 4.7 only; …
• Microsoft PowerShell: from 7.2, before 7.2.19 (fixed in 7.2.19); from 7.3, before 7.3.12 (fixed in 7.3.12); from 7.4, before 7.4.2 (fixed in 7.4.2)
• Microsoft Visual Studio 2022: from 17.4.0, before 17.4.18 (fixed in 17.4.18); from 17.6.0, before 17.6.14 (fixed in 17.6.14); from 17.8.0, before 17.8.9 (fixed in 17.8.9); from 17.9.0, before 17.9.6 (fixed in 17.9.6)

Published 2024-04-09. Last modified 2026-06-17.