CVE-2022-41064

Summary

.NET Framework Information Disclosure Vulnerability

Affected Software

VendorProductVersion RangeStatus
MicrosoftNuget 2.1.21.0.0 < 2.1.2affected
MicrosoftNuget 4.8.51.0.0 < 4.8.4affected
MicrosoftMicrosoft .NET Framework 4.84.8.0 < 4.8.04584.08affected
MicrosoftMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.23.0.0.0 < 10.0.14393.5501affected
MicrosoftMicrosoft .NET Framework 4.7.210.0.0.0 < 10.0.04005.02affected
MicrosoftMicrosoft .NET Framework 4.8.14.8.0.0 < 4.8.09110.07affected
MicrosoftMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.24.7.0 < 4.7.04005.02affected
MicrosoftMicrosoft .NET Framework 4.6.24.7.0 < 4.7.04005.02affected
MicrosoftMicrosoft .NET Framework 4.6/4.6.210.0.0.0 < 10.0.10240.19567affected

Weaknesses

  • Information Disclosure

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References