Microsoft · Security update · August 13, 2024

KB5042132: August 2024 security update

KB5042132, released August 13, 2024, fixes 2 CVEs in .NET 8.0. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0270
86th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Applies to

Product
.NET 8.0

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2024-38168 .NET and Visual Studio Denial of Service 7.5 0.0270 Exploitation Less Likely
Routine CVE-2024-38167 .NET and Visual Studio Information Disclosure 6.5 0.0139 Exploitation Less Likely
Showing 1 to 2 of 2 1