Threats tagged 'ghsa-hq7w-xv5x-g34j'

CVE-2024-38081 is an elevation of privilege vulnerability affecting .NET 6.0 applications running on versions 6.0.0 and earlier. The flaw allows an unprivileged user to manipulate the Visual Studio installation on Windows, potentially leading to elevated privileges. Microsoft has released patches in version 6.0.1 to address this issue. No mitigating factors have been identified, and users are advised to update to the fixed versions or later. Self-contained applications targeting affected versions must be recompiled and redeployed to mitigate the vulnerability.