Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-35264

27
FAUCET Score

CVE-2024-35264 is a Remote Code Execution (RCE) vulnerability affecting Microsoft .NET and Visual Studio 2022. Rated 8.1 HIGH on CVSS, this flaw can be exploited remotely with high impact on confidentiality, integrity, and availability, though it requires high attack complexity and no user interaction. While not currently listed in CISA's KEV catalog and lacking public exploit code, its high FAUCET Risk Score and notable community discussion and media coverage suggest it warrants attention.

Impacted Technologies

VendorProductVersion(s)CPE
>= 8.0.0, < 8.0.7CPE matchmatch criteria
cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
>= 17.4.0, < 17.4.21CPE matchmatch criteria
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
>= 17.6.0, < 17.6.17CPE matchmatch criteria
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
>= 17.8.0, < 17.8.12CPE matchmatch criteria
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
>= 17.10.0, < 17.10.4CPE matchmatch criteria
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.1HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.2
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.56%
Probability of exploitation in next 30 days
EPSS Percentile
83.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0256 is in the 41st percentile among its peer group of 8,920 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (20)

microsoftpatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: Microsoft Visual Studio 2022 version 17.6Fixed in: 17.6.17
View patch
microsoftpatch availablevia msrc
Product: Microsoft Visual Studio 2022 version 17.10Fixed in: 17.10.4
View patch
microsoftpatch availablevia msrc
Product: .NET 8.0Fixed in: 8.0.7
View patch
microsoftpatch availablevia msrc
Product: Microsoft Visual Studio 2022 version 17.4Fixed in: 17.4.21
View patch
microsoftpatch availablevia msrc
Product: Microsoft Visual Studio 2022 version 17.8Fixed in: 17.8.12
View patch
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.osx-arm64Fixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.osx-x64Fixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.win-armFixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.win-arm64Fixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.linux-armFixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.win-x86Fixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.win-x64Fixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.linux-arm64Fixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.linux-musl-armFixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.linux-musl-arm64Fixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.linux-musl-x64Fixed in: 8.0.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.App.Runtime.linux-x64Fixed in: 8.0.7
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: dotnet8.0-0:8.0.107-1.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: dotnet8.0-0:8.0.107-1.el8_10
View patch

Vendor Advisories (3)

nugetGHSA-chfc-9w6m-75rfcritical

Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability

Jul 9, 2024
microsoft2024-Jul/CVE-2024-35264Important

.NET and Visual Studio Remote Code Execution Vulnerability

Jul 9, 2024
redhatCVE-2024-35264Important

dotnet: DoS in ASP.NET Core 8

Jul 9, 2024

References

herodevs.com / vulnerability-directory/cve-2024-35264
msrc.microsoft.com / update-guide/vulnerability/CVE-2024-35264
PatchVendor Advisory