CVE-2022-41032

CVE-2022-41032 · NuGet Client Elevation of Privilege Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

NuGet Client Elevation of Privilege Vulnerability

CVSS 7.8 · High · EPSS 1.3% · Fix available

Stack: system

Affected products and versions

.net 6.0
Versions
- ≥ 6.0.0, < 6.0.10: Affected (custom)
Update to 6.0.10
.net core 3.1
Versions
- ≥ 3.1, < 3.1.30: Affected (custom)
Update to 3.1.30
microsoft visual studio 2022 version 17.2
Versions
- ≥ 17.2.0, < 17.2.9: Affected (custom)
Update to 17.2.9
microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)
Versions
- ≥ 16.11.0, < 16.11.20: Affected (custom)
Update to 16.11.20
microsoft visual studio 2019 version 16.9 (includes 16.0 - 16.8)
Versions
- ≥ 15.0.0, < 16.9.26: Affected (custom)
Update to 16.9.26
microsoft visual studio 2022 version 17.0
Versions
- ≥ 17.0.0, < 17.0.15: Affected (custom)
Update to 17.0.15
microsoft visual studio 2022 version 17.3
Versions
- ≥ 17.0.0, < 17.3.6: Affected (custom)
Update to 17.3.6
visual studio 2022 for mac version 17.3
Versions
- ≥ 17.3, < 17.3.7: Affected (custom)
Update to 17.3.7
dotnet6 Ubuntu:22.04:LTS
Versions
- 6.0.108-0ubuntu1~22.04.1
- 6.0.109-0ubuntu1~22.04.1
Affected ranges
- ECOSYSTEM: < 6.0.110-0ubuntu1~22.04.1
Update to 6.0.110-0ubuntu1~22.04.1