TI-2022-15528 Aliases CVE-2022-34716 GHSA-vh55-786g-wjwj

.NET Spoofing Vulnerability

LOW 31CWE-290Published 2022-08-09 · Updated 2025-05-29

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Spoofing
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub, Red Hat and Microsoft. Impact type from Microsoft.

Summary

.NET Spoofing Vulnerability

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.02498 84th percentileScored 2026-11-07

Fix Fixed System.Security.Cryptography.Xml (NuGet): 4.7.1, 6.0.1Microsoft.AspNetCore.App.Runtime.win-x64 (NuGet): 3.1.28, 6.0.8+11 more productsRed Hat: 5 advisoriesMicrosoft: 2 updates

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Microsoft	Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	15.9.0 to before 15.9.50	15.9.50	Patch available	CNA
Microsoft	Microsoft Visual Studio 2022 version 17.2	17.2.0 to before 17.2.7	17.2.7	Patch available	CNA
Microsoft	Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)	15.0.0 to before 16.9.24	16.9.24	Patch available	CNA
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	16.11.0 to before 16.11.18	16.11.18	Patch available	CNA
Microsoft	Microsoft Visual Studio 2022 version 17.0	17.0.0 to before 17.0.13	17.0.13	Patch available	CNA
Microsoft	.NET 6.0	6.0.0 to before 6.0.8	6.0.8	Patch available	CNA
Microsoft	.NET Core 3.1	3.1 to before 3.1.28	3.1.28	Patch available	CNA
Microsoft	PowerShell 7.0	7.0.0 to before 7.0.12	7.0.12	Patch available	CNA
Microsoft	PowerShell 7.2	7.2.0 to before 7.2.6	7.2.6	Patch available	CNA
—	System.Security.Cryptography.Xml (NuGet)	before 4.7.1	4.7.1	Patch available	GHSA-vh55-786g-wjwj
—	System.Security.Cryptography.Xml (NuGet)	5.0.0 to before 6.0.1	6.0.1	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.win-x64 (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.win-x64 (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-x64 (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-x64 (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.win-x86 (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.win-x86 (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.osx-x64 (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.osx-x64 (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-arm64 (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-arm64 (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.win-arm64 (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.win-arm64 (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.win-arm (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.win-arm (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.osx-arm64 (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet)	3.1.0 to before 3.1.28	3.1.28	Patch available	GHSA-vh55-786g-wjwj
—	Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet)	6.0.0 to before 6.0.8	6.0.8	Patch available	GHSA-vh55-786g-wjwj

Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) VendorMicrosoft Affected 15.9.0 to before 15.9.50 Fixed in 15.9.50 Patch available CNA
Microsoft Visual Studio 2022 version 17.2 VendorMicrosoft Affected 17.2.0 to before 17.2.7 Fixed in 17.2.7 Patch available CNA
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) VendorMicrosoft Affected 15.0.0 to before 16.9.24 Fixed in 16.9.24 Patch available CNA
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) VendorMicrosoft Affected 16.11.0 to before 16.11.18 Fixed in 16.11.18 Patch available CNA
Microsoft Visual Studio 2022 version 17.0 VendorMicrosoft Affected 17.0.0 to before 17.0.13 Fixed in 17.0.13 Patch available CNA
.NET 6.0 VendorMicrosoft Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available CNA
.NET Core 3.1 VendorMicrosoft Affected 3.1 to before 3.1.28 Fixed in 3.1.28 Patch available CNA
PowerShell 7.0 VendorMicrosoft Affected 7.0.0 to before 7.0.12 Fixed in 7.0.12 Patch available CNA
PowerShell 7.2 VendorMicrosoft Affected 7.2.0 to before 7.2.6 Fixed in 7.2.6 Patch available CNA
System.Security.Cryptography.Xml (NuGet) Vendor— Affected before 4.7.1 Fixed in 4.7.1 Patch available GHSA-vh55-786g-wjwj
System.Security.Cryptography.Xml (NuGet) Vendor— Affected 5.0.0 to before 6.0.1 Fixed in 6.0.1 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.win-x64 (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.win-x64 (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-x64 (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-x64 (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.win-x86 (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.win-x86 (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.osx-x64 (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.osx-x64 (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-arm64 (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-arm64 (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.win-arm64 (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.win-arm64 (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.win-arm (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.win-arm (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.osx-arm64 (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet) Vendor— Affected 3.1.0 to before 3.1.28 Fixed in 3.1.28 Patch available GHSA-vh55-786g-wjwj
Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet) Vendor— Affected 6.0.0 to before 6.0.8 Fixed in 6.0.8 Patch available GHSA-vh55-786g-wjwj

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:microsoft:.net::::::::	6.0.0 to before 6.0.8	Vulnerable	Microsoft
cpe:2.3:a:microsoft:.net_core::::::::	3.1 to before 3.1.28	Vulnerable	Microsoft
cpe:2.3:a:microsoft:powershell::::::::	7.0 to before 7.0.12; 7.2 to before 7.2.6	Vulnerable	Microsoft

cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* Versions 6.0.0 to before 6.0.8 Vulnerable ·Microsoft
cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:* Versions 3.1 to before 3.1.28 Vulnerable ·Microsoft
cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:* Versions 7.0 to before 7.0.12; 7.2 to before 7.2.6 Vulnerable ·Microsoft

Remediation

Fix · GHSA-vh55-786g-wjwj System.Security.Cryptography.Xml (NuGet) Fixed in 4.7.1 Advisory →
Fix · GHSA-vh55-786g-wjwj System.Security.Cryptography.Xml (NuGet) Fixed in 6.0.1 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.win-x64 (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.win-x64 (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-x64 (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-x64 (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.win-x86 (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.win-x86 (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.osx-x64 (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.osx-x64 (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-arm64 (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-arm64 (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.win-arm64 (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.win-arm64 (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.win-arm (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.win-arm (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.osx-arm64 (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (NuGet) Fixed in 6.0.8 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet) Fixed in 3.1.28 Advisory →
Fix · GHSA-vh55-786g-wjwj Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet) Fixed in 6.0.8 Advisory →

Red Hat 5 advisories

RHSA-2022:6058 Released 2022-08-15 · Red Hat rating Moderate
.NET 6.0 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 8) aspnetcore-runtime-6.0-6.0.8-1.el8_6, aspnetcore-targeting-pack-6.0-6.0.8-1.el8_6, dotnet-6.0.108-1.el8_6 +9
- Red Hat Enterprise Linux CRB (v. 8) dotnet-sdk-6.0-source-built-artifacts-6.0.108-1.el8_6
RHSA-2022:6057 Released 2022-08-15 · Red Hat rating Moderate
.NET Core 3.1 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 8) aspnetcore-runtime-3.1-3.1.28-1.el8_6, aspnetcore-targeting-pack-3.1-3.1.28-1.el8_6, dotnet-apphost-pack-3.1-3.1.28-1.el8_6 +6
- Red Hat Enterprise Linux CRB (v. 8) dotnet-sdk-3.1-source-built-artifacts-3.1.422-1.el8_6
RHSA-2022:6043 Released 2022-08-10 · Red Hat rating Moderate
.NET 6.0 security, bug fix, and enhancement update
- Red Hat CodeReady Linux Builder (v. 9) dotnet-sdk-6.0-source-built-artifacts-6.0.108-1.el9_0
- Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-6.0-6.0.8-1.el9_0, aspnetcore-targeting-pack-6.0-6.0.8-1.el9_0, dotnet-apphost-pack-6.0-6.0.8-1.el9_0 +8

Show 2 more Red Hat advisories

RHSA-2022:6038 Released 2022-08-10 · Red Hat rating Moderate
.NET 6.0 security, bug fix, and enhancement update
- .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet60-aspnetcore-runtime-6.0-6.0.8-1.el7_9, rh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.8-1.el7_9, rh-dotnet60-dotnet-6.0.108-1.el7_9 +9
- .NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet60-aspnetcore-runtime-6.0-6.0.8-1.el7_9, rh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.8-1.el7_9, rh-dotnet60-dotnet-6.0.108-1.el7_9 +9
- .NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet60-aspnetcore-runtime-6.0-6.0.8-1.el7_9, rh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.8-1.el7_9, rh-dotnet60-dotnet-6.0.108-1.el7_9 +9
RHSA-2022:6037 Released 2022-08-10 · Red Hat rating Moderate
.NET Core 3.1 security, bug fix, and enhancement update
- .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.28-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.28-1.el7_9, rh-dotnet31-dotnet-3.1.422-1.el7_9 +9
- .NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.28-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.28-1.el7_9, rh-dotnet31-dotnet-3.1.422-1.el7_9 +9
- .NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.28-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.28-1.el7_9, rh-dotnet31-dotnet-3.1.422-1.el7_9 +9

Microsoft 2 updates

KB5016990
Security Update
- .NET 6.0 6.0.8
KB5016987
Security Update
- .NET Core 3.1 3.1.28

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)	Fixed	RHSA-2022:6037, RHSA-2022:6038
.NET Core on Red Hat Enterprise Linux Server (v. 7)	Fixed	RHSA-2022:6037, RHSA-2022:6038
.NET Core on Red Hat Enterprise Linux Workstation (v. 7)	Fixed	RHSA-2022:6037, RHSA-2022:6038
Red Hat CodeReady Linux Builder (v. 9)	Fixed	RHSA-2022:6043
Red Hat Enterprise Linux AppStream (v. 8)	Fixed	RHSA-2022:6057, RHSA-2022:6058
Red Hat Enterprise Linux AppStream (v. 9)	Fixed	RHSA-2022:6043
Red Hat Enterprise Linux CRB (v. 8)	Fixed	RHSA-2022:6057, RHSA-2022:6058

Microsoft

Microsoft's page for this CVE →

Impact: Spoofing
Exploited: No
Publicly disclosed: —
Exploitability: Exploitation Less Likely

Product	Status	Plan or fix
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	Fixed	15.9.50 · Security Update
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	Fixed	16.11.18 · Security Update
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)	Fixed	16.9.24 · Security Update
Microsoft Visual Studio 2022 version 17.0	Fixed	17.0.13 · Security Update
Microsoft Visual Studio 2022 version 17.2	Fixed	17.2.7 · Security Update
PowerShell 7.0	Fixed	7.0.12 · Security Update
PowerShell 7.2	Fixed	7.2.6 · Security Update

Timeline

2026-10-02 Threatist record created from CVE-2022-34716
2026-10-03 Alias added: GHSA-vh55-786g-wjwj

References

Advisory 2

Other 4

TI-2026-79288 Out-of-bounds write in Google Brotli decoder KEVCVSS 4.0CRITICAL 9.2
TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
TI-2023-19596 .NET and Visual Studio Denial of Service Vulnerability KEVCVSS 3.1HIGH 7.5
TI-2023-19588 Microsoft QUIC Denial of Service Vulnerability CVSS 3.1HIGH 7.5
TI-2024-14152 .NET and Visual Studio Denial of Service Vulnerability CVSS 3.1HIGH 7.5
TI-2021-08380 .NET Core Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8

See all 129 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences

.NET Spoofing Vulnerability

Key facts

Summary

Why it matters now

SSVC decision points

Affected products

CPE configurations NVD · 3

Remediation

Red Hat 5 advisories

Microsoft 2 updates

Vendor assessments

Red Hat

Microsoft

Timeline

References

Advisory 2

Other 4

More Microsoft .net vulnerabilities

Sources