CVE-2022-21986: .net from 5.0 (inclusive), before 5.0.14 (exclusive), from 6.0.0 (inclusive), before 6.0.2 (exclusive); +9 more…

Affected technology

.net · from 5.0 (inclusive), before 5.0.14 (exclusive)
microsoft

.net · from 6.0.0 (inclusive), before 6.0.2 (exclusive)
microsoft

visual studio 2019 · from 8.10 (inclusive), before 8.10.18 (exclusive)
microsoft

visual studio 2019 · from 16.0 (inclusive), through 16.11 (inclusive)
microsoft

visual studio 2022 · from 17.0 (inclusive), before 17.0.6 (exclusive)
microsoft

fedora · 34
fedoraproject

fedora · 35
fedoraproject

Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) · 15.0.0 to before 16.9.17
Microsoft

Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) · 16.11.0 to before 16.11.10
Microsoft

Microsoft Visual Studio 2022 version 17.0 · 17.0.0 to before 17.0.6
Microsoft

Visual Studio 2019 for Mac version 8.10 · 8.1.0 to before 8.10.18
Microsoft

.NET 5.0 · 5.0.0 to before 5.0.14
Microsoft

.NET 6.0 · 6.0.0 to before 6.0.2
Microsoft

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service. Vendor/CNA’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high.