Microsoft Visual Studio 2019 Version 16 11 Includes 16 0 16 10
Monthly
Local privilege escalation in Microsoft .NET Framework (versions 3.5 through 10.0) and Visual Studio 2017 occurs through heap-based buffer overflow exploitation requiring user interaction with a malicious file. Attackers without initial privileges can achieve high-level code execution and data access by convincing a user to open a specially crafted document or application. Microsoft has released patches across all affected .NET versions per MSRC advisory, indicating this is a vendor-confirmed issue requiring immediate remediation for systems where users process untrusted .NET content.
Absolute path traversal in Microsoft .NET Core (Windows runtime, versions 8.0 through 10.0) enables a network-accessible attacker to write arbitrary files and directories to restricted locations on a vulnerable system by sending a specially crafted file. Exploitation is constrained by limited attacker control over the write destination, and SSVC assessment rates exploitation as 'none' with non-automatable impact, consistent with the low EPSS of 0.08%. A publicly available proof-of-concept exists on GitHub Gist, but no confirmed active exploitation appears in CISA KEV; patched runtime versions are available for all affected .NET branches.
Local privilege escalation in Microsoft .NET Framework (versions 3.5 through 10.0) and Visual Studio 2017 occurs through heap-based buffer overflow exploitation requiring user interaction with a malicious file. Attackers without initial privileges can achieve high-level code execution and data access by convincing a user to open a specially crafted document or application. Microsoft has released patches across all affected .NET versions per MSRC advisory, indicating this is a vendor-confirmed issue requiring immediate remediation for systems where users process untrusted .NET content.
Absolute path traversal in Microsoft .NET Core (Windows runtime, versions 8.0 through 10.0) enables a network-accessible attacker to write arbitrary files and directories to restricted locations on a vulnerable system by sending a specially crafted file. Exploitation is constrained by limited attacker control over the write destination, and SSVC assessment rates exploitation as 'none' with non-automatable impact, consistent with the low EPSS of 0.08%. A publicly available proof-of-concept exists on GitHub Gist, but no confirmed active exploitation appears in CISA KEV; patched runtime versions are available for all affected .NET branches.