Description
NuGet Client Elevation of Privilege Vulnerability
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft .NET 6.0
6.0.0 to < 6.0.10affected
Microsoft .NET Core 3.1
3.1 to < 3.1.30affected
Microsoft Microsoft Visual Studio 2022 version 17.2
17.2.0 to < 17.2.9affected
Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
16.11.0 to < 16.11.20affected
Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
15.0.0 to < 16.9.26affected
Microsoft Microsoft Visual Studio 2022 version 17.0
17.0.0 to < 17.0.15affected
Microsoft Microsoft Visual Studio 2022 version 17.3
17.0.0 to < 17.3.6affected
Microsoft Visual Studio 2022 for Mac version 17.3
17.3 to < 17.3.7affected
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41032 ↗
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41032 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM/ ↗