Description
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft .NET 10.0 runtime
10.0.0 to < 10.0.11affected
Microsoft .NET 8.0 runtime
8.0.0 to < 8.0.30affected
Microsoft .NET 9.0 runtime
9.0.0 to < 9.0.19affected
Microsoft Microsoft Visual Studio 2022 version 17.14
17.14.0 to < 17.14.38affected
Microsoft Microsoft Visual Studio 2026 version 18.8
18.0 to < 18.8.3affected