Microsoft update

KB5034275

Security Update

Fixed in

TI-2024-19239 CVE-2024-29059 · GHSA-pg2q-wfgh-r323

CRITICAL 90KEV

.NET Framework Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.98624 Published 2024-03-22 Fixed in 4.8.04690.02, 4.7.04081.03 +4 CWE-209

TI-2024-00056 CVE-2024-0057 · GHSA-68w7-72jg-6qpp

MEDIUM 54

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02778 Published 2024-01-09 Fixed in 8.0.1, 7.0.15 +25 CWE-20

TI-2024-00055 CVE-2024-0056 · GHSA-98g6-xh36-x2p7

MEDIUM 42

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.0118 Published 2024-01-09 Fixed in 16.0.1110.1, 6.0.26 +17 CWE-319

TI-2024-14073 CVE-2024-21312 · GHSA-3qxp-wv2v-jfc4

LOW 39

.NET Framework Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03578 Published 2024-01-09 Fixed in 4.8.09214.01, 4.8.04690.02 +3 CWE-20

TI-2023-18095 CVE-2023-36042 · GHSA-2mj4-5v84-3p3j

LOW 29

Visual Studio Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00787 Published 2023-11-14 Fixed in 17.6.10, 17.7.7 +1 CWE-122