Microsoft update

KB5033734

Security Update

Fixed in

TI-2024-00056 CVE-2024-0057 · GHSA-68w7-72jg-6qpp

MEDIUM 54

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02778 Published 2024-01-09 Fixed in 8.0.1, 7.0.15 +25 CWE-20

TI-2024-13483 CVE-2024-20672 · GHSA-rh83-2fx8-8x6x

MEDIUM 44

.NET Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02895 Published 2024-01-09 Fixed in 6.0.26, 7.0.15 CWE-400

TI-2024-00055 CVE-2024-0056 · GHSA-98g6-xh36-x2p7

MEDIUM 42

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.0118 Published 2024-01-09 Fixed in 16.0.1110.1, 6.0.26 +17 CWE-319

TI-2024-14080 CVE-2024-21319 · GHSA-59j7-ghrg-fj52

LOW 35

Microsoft Identity Denial of service vulnerability

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.02892 Published 2024-01-09 Fixed in 6.0.26, 17.2.23 +8 CWE-20