CVE-2022-24512: fedoraproject fedora Code Injection

CVSS: 6.8v2.0MediumModified

AliasesGHSA-c6w8-7mp3-34j9BIT-dotnet-2022-24512BIT-dotnet-sdk-2022-24512+1 more

Published 09-03-2022Last modified 27-05-2026

Vulnerability summary

CVE-2022-24512 is a medium (CVSS 6.8) Code Injection vulnerability in fedoraproject fedora. EPSS estimates a 1.61% chance of exploitation in the next 30 days, higher than 75.5% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

1.61%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

RHSA-2022:0826 RHSA-2022:0827 RHSA-2022:0828 RHSA-2022:0829 RHSA-2022:0830 RHSA-2022:0832

Timeline

09-03-2022
PublishedVulnerability first disclosed.
27-05-2026
Last modifiedVulnerability information updated.

Description

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS metrics

4 scores · 3 sources · 2 versions

v3.16.3v2.06.8

EPSS trend

Probability

1.61%

Chance of exploitation in the next 30 days

Percentile

76%

Versus all other CVEs

30-day change

0.00 pp

From 1.61% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.61%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-94Improper Control of Generation of Code ('Code Injection')The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Affected systems

NuGet115 products

Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm≥ 6.0.0, < 6.0.3

Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.linux-arm≥ 3.0.0, < 3.1.23 | ≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.linux-arm64≥ 3.0.0, < 3.1.23 | ≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm64≥ 3.0.0, < 3.1.23 | ≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-x64≥ 3.0.0, < 3.1.23 | ≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.linux-x64≥ 3.0.0, < 3.1.23 | ≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm64≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-x64≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.osx-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.osx-x64≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.win-x64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.Mono.win-x86≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.osx-arm64≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.osx-x64≥ 3.0.0, < 3.1.23 | ≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.win-arm≥ 3.0.0, < 3.1.23 | ≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.win-arm64≥ 3.0.0, < 3.1.23 | ≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.win-x64≥ 3.0.0, < 3.1.23 | ≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3
Microsoft.NETCore.App.Runtime.win-x86≥ 3.0.0, < 3.1.23 | ≥ 5.0.0, < 5.0.15 | ≥ 6.0.0, < 6.0.3

Show all 115

Microsoft15 products

microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)≥ 16.11.0, < 16.11.11
microsoft visual studio 2019 version 16.7 (includes 16.0 – 16.6)≥ 16.0.0, < 16.7.26
microsoft visual studio 2019 version 16.9 (includes 16.0 - 16.8)≥ 15.0.0, < 16.9.18
microsoft visual studio 2022 version 17.0≥ 17.0.0, < 17.0.7
.netEOL5.0 | 6.0.0

Show all 15

Fedoraproject1 product

fedoraEOL34 | 35 | 36

3 vendors · 131 products

References

11 links

Show all 11 references

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512WEB

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities