Skip to main content

Improperly Implemented Security Check for Standard

CVE-2024-0057

High
9.8/10

Summary

NET, NET Framework, and Visual Studio contain Security Feature Bypass Vulnerability. This vulnerability affects Microsoft.WindowsDesktop.App.Runtime package versions 6.0.x prior to 6.0.26, 7.0.x prior to 7.0.15, and 8.0.x prior to 8.0.1. This vulnerability also affects PowerShell package versions 7.2.x prior to 7.2.18, and 7.3.x prior to 7.3.11.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-358 - Improperly Implemented Security Check for Standard

The software does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.

References

Advisory Timeline

  • Published