Share this article

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low

Copilot in Outlook will generate personalized themes for you to customize the app

Microsoft will raise the price of its 365 Suite to include AI capabilities

Death Stranding Director’s Cut is now Xbox X|S at a huge discount

Outlook will let users create custom account icons so they can tell their accounts apart easier

Latest .NET updates patch the Visual Studio Remote Code Execution Vulnerability

The CVE-2024-21409 vulnerability can cause data breaches for your organization

2 min. read

Published onApril 10, 2024

published onApril 10, 2024

Share this article

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Microsoftissued updatesfor .NET 6, .NET 7 and .NET 8 to address the CVE-2024-21409 listed as an important vulnerability for .NET and Visual Studio Remote Code Execution.

A Remote Code Execution (RCE) attack allows an attacker to execute malicious code on an organization’s computers or network. This capability to run code controlled by the attacker can serve multiple objectives, such as installing further malware or exfiltrating confidential information.

RCEs attacksare very common means for attackers nowadays to steal data and break into Government and organizations systems.

How do I patch my .NET to avoid security issues?

The latest .NET updates, .NET 8.0.4, 7.0.18, .NET 6.0.29 for Windows, macOS, and Linux, for x86, x64, Arm32, and Arm64 are available for download from thededicated GitHub page.

However, you may also use the Windows Package Manager CLI (winget) commands to install them:

Microsoft also warns about a use-after-free vulnerability in WPF which may result in Elevation of Privilege when just by viewing untrusted documents. We recommend updating .NET as soon as possible to avoid these security issues.

You should also be aware that.NET 7 will soon reach end of support. The apps will still run but Microsoft recommends an upgrade.

Did you encounter any problems with the updates? Let us know in the comments section below.

More about the topics:.NET Framework,visual studio

Claudiu Andone

Windows Toubleshooting Expert

Oldtimer in the tech and science press, Claudiu is focused on whatever comes new from Microsoft.

His abrupt interest in computers started when he saw the first Home Computer as a kid. However, his passion for Windows and everything related became obvious when he became a sys admin in a computer science high school.

With 14 years of experience in writing about everything there is to know about science and technology, Claudiu also likes rock music, chilling in the garden, and Star Wars. May the force be with you, always!

User forum

0 messages

Sort by:LatestOldestMost Votes

Comment*

Name*

Email*

Commenting as.Not you?

Save information for future comments

Comment

Claudiu Andone

Windows Toubleshooting Expert

Oldtimer in the tech and science press, with 14 years of experience in writing on everything there is to know about science, technology, and Microsoft

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low#

Copilot in Outlook will generate personalized themes for you to customize the app#

Microsoft will raise the price of its 365 Suite to include AI capabilities#

Death Stranding Director’s Cut is now Xbox X|S at a huge discount#

Outlook will let users create custom account icons so they can tell their accounts apart easier#

Latest .NET updates patch the Visual Studio Remote Code Execution Vulnerability#

How do I patch my .NET to avoid security issues?#