.NET and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in .NET and Microsoft Visual Studio 2022. This issue arises from an untrusted search path, which allows an unauthorized attacker to execute code over a network. The vulnerability is present in .NET 9.0 and 8.0, as well as in Visual Studio 2022 versions 17.8, 17.10, 17.12, and 17.14.

Impact

Exploitation of this vulnerability allows for remote code execution.

Remediation

Users can apply the security update available through the Microsoft Visual Studio update channel. For .NET, the security update can be downloaded from the .NET download page for the respective version.