NuGet Client Elevation of Privilege Vulnerability
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-aspnetcore-runtime-3.1alma-upgrade-aspnetcore-runtime-6.0alma-upgrade-aspnetcore-runtime-7.0alma-upgrade-aspnetcore-targeting-pack-3.1alma-upgrade-aspnetcore-targeting-pack-6.0alma-upgrade-aspnetcore-targeting-pack-7.0alma-upgrade-dotnetalma-upgrade-dotnet-apphost-pack-3.1alma-upgrade-dotnet-apphost-pack-6.0alma-upgrade-dotnet-apphost-pack-7.0alma-upgrade-dotnet-hostalma-upgrade-dotnet-hostfxr-3.1alma-upgrade-dotnet-hostfxr-6.0alma-upgrade-dotnet-hostfxr-7.0alma-upgrade-dotnet-runtime-3.1alma-upgrade-dotnet-runtime-6.0alma-upgrade-dotnet-runtime-7.0alma-upgrade-dotnet-sdk-3.1alma-upgrade-dotnet-sdk-3.1-source-built-artifactsalma-upgrade-dotnet-sdk-6.0alma-upgrade-dotnet-sdk-6.0-source-built-artifactsalma-upgrade-dotnet-sdk-7.0alma-upgrade-dotnet-sdk-7.0-source-built-artifactsalma-upgrade-dotnet-targeting-pack-3.1alma-upgrade-dotnet-targeting-pack-6.0alma-upgrade-dotnet-targeting-pack-7.0alma-upgrade-dotnet-templates-3.1alma-upgrade-dotnet-templates-6.0alma-upgrade-dotnet-templates-7.0alma-upgrade-netstandard-targeting-pack-2.1 | Oct 20, 2022 | Oct 11, 2022 | |
| Alpine Linux | alpine-linux-upgrade-dotnet6-buildalpine-linux-upgrade-dotnet6-runtime | Aug 22, 2024 | Oct 11, 2022 | |
| Centos_linux | — | centos-upgrade-aspnetcore-runtime-3-1centos-upgrade-aspnetcore-runtime-6-0centos-upgrade-aspnetcore-runtime-7-0centos-upgrade-aspnetcore-targeting-pack-3-1centos-upgrade-aspnetcore-targeting-pack-6-0centos-upgrade-aspnetcore-targeting-pack-7-0centos-upgrade-dotnetcentos-upgrade-dotnet-apphost-pack-3-1centos-upgrade-dotnet-apphost-pack-3-1-debuginfocentos-upgrade-dotnet-apphost-pack-6-0centos-upgrade-dotnet-apphost-pack-6-0-debuginfocentos-upgrade-dotnet-apphost-pack-7-0centos-upgrade-dotnet-apphost-pack-7-0-debuginfocentos-upgrade-dotnet-hostcentos-upgrade-dotnet-host-debuginfocentos-upgrade-dotnet-hostfxr-3-1centos-upgrade-dotnet-hostfxr-3-1-debuginfocentos-upgrade-dotnet-hostfxr-6-0centos-upgrade-dotnet-hostfxr-6-0-debuginfocentos-upgrade-dotnet-hostfxr-7-0centos-upgrade-dotnet-hostfxr-7-0-debuginfocentos-upgrade-dotnet-runtime-3-1centos-upgrade-dotnet-runtime-3-1-debuginfocentos-upgrade-dotnet-runtime-6-0centos-upgrade-dotnet-runtime-6-0-debuginfocentos-upgrade-dotnet-runtime-7-0centos-upgrade-dotnet-runtime-7-0-debuginfocentos-upgrade-dotnet-sdk-3-1centos-upgrade-dotnet-sdk-3-1-debuginfocentos-upgrade-dotnet-sdk-6-0centos-upgrade-dotnet-sdk-6-0-debuginfocentos-upgrade-dotnet-sdk-7-0centos-upgrade-dotnet-sdk-7-0-debuginfocentos-upgrade-dotnet-targeting-pack-3-1centos-upgrade-dotnet-targeting-pack-6-0centos-upgrade-dotnet-targeting-pack-7-0centos-upgrade-dotnet-templates-3-1centos-upgrade-dotnet-templates-6-0centos-upgrade-dotnet-templates-7-0centos-upgrade-dotnet3-1-debuginfocentos-upgrade-dotnet3-1-debugsourcecentos-upgrade-dotnet6-0-debuginfocentos-upgrade-dotnet6-0-debugsourcecentos-upgrade-dotnet7-0-debuginfocentos-upgrade-dotnet7-0-debugsourcecentos-upgrade-netstandard-targeting-pack-2-1 | Oct 20, 2022 | Oct 11, 2022 |
| Microsoft Visual_studio | microsoft-visual_studio_2019-upgrade-latest-ltsc_16_11microsoft-visual_studio_2019-upgrade-latest-ltsc_16_9microsoft-visual_studio_2022-upgrade-latest-ltsc_17_0microsoft-visual_studio_2022-upgrade-latest-ltsc_17_2microsoft-visual_studio_2022-upgrade-latest-current_channel | Jun 25, 2025 | Oct 11, 2022 | |
| Msft | — | msft-kb5019349-a8b1f5ec-9c10-4baa-b2c6-d63b4eafc461msft-kb5019349-aa1c9bd5-7670-46d8-ba0d-cf4e4ebbededmsft-kb5019349-f29b0921-7e48-4a30-b266-950da779dcadmsft-kb5019351-1c9c1cae-4f5e-44df-a887-f4454ed80851msft-kb5019351-297e764c-ceda-4b82-b782-a008b755e586msft-kb5019351-2d92dff8-4e3a-4e9c-9bd8-5872fc7d52c9msft-kb5019351-3a95a9aa-748c-4c80-97bb-f4353a877e04 | Oct 11, 2022 | Oct 11, 2022 |
| Oracle_linux | — | oracle-linux-upgrade-aspnetcore-runtime-3-1oracle-linux-upgrade-aspnetcore-runtime-6-0oracle-linux-upgrade-aspnetcore-runtime-7-0oracle-linux-upgrade-aspnetcore-targeting-pack-3-1oracle-linux-upgrade-aspnetcore-targeting-pack-6-0oracle-linux-upgrade-aspnetcore-targeting-pack-7-0oracle-linux-upgrade-dotnetoracle-linux-upgrade-dotnet-apphost-pack-3-1oracle-linux-upgrade-dotnet-apphost-pack-6-0oracle-linux-upgrade-dotnet-apphost-pack-7-0oracle-linux-upgrade-dotnet-hostoracle-linux-upgrade-dotnet-hostfxr-3-1oracle-linux-upgrade-dotnet-hostfxr-6-0oracle-linux-upgrade-dotnet-hostfxr-7-0oracle-linux-upgrade-dotnet-runtime-3-1oracle-linux-upgrade-dotnet-runtime-6-0oracle-linux-upgrade-dotnet-runtime-7-0oracle-linux-upgrade-dotnet-sdk-3-1oracle-linux-upgrade-dotnet-sdk-3-1-source-built-artifactsoracle-linux-upgrade-dotnet-sdk-6-0oracle-linux-upgrade-dotnet-sdk-6-0-source-built-artifactsoracle-linux-upgrade-dotnet-sdk-7-0oracle-linux-upgrade-dotnet-sdk-7-0-source-built-artifactsoracle-linux-upgrade-dotnet-targeting-pack-3-1oracle-linux-upgrade-dotnet-targeting-pack-6-0oracle-linux-upgrade-dotnet-targeting-pack-7-0oracle-linux-upgrade-dotnet-templates-3-1oracle-linux-upgrade-dotnet-templates-6-0oracle-linux-upgrade-dotnet-templates-7-0oracle-linux-upgrade-netstandard-targeting-pack-2-1 | Oct 13, 2022 | Oct 11, 2022 |
| Redhat_linux | redhat-upgrade-aspnetcore-runtime-3-1redhat-upgrade-aspnetcore-runtime-6-0redhat-upgrade-aspnetcore-runtime-7-0redhat-upgrade-aspnetcore-targeting-pack-3-1redhat-upgrade-aspnetcore-targeting-pack-6-0redhat-upgrade-aspnetcore-targeting-pack-7-0redhat-upgrade-dotnetredhat-upgrade-dotnet-apphost-pack-3-1redhat-upgrade-dotnet-apphost-pack-3-1-debuginforedhat-upgrade-dotnet-apphost-pack-6-0redhat-upgrade-dotnet-apphost-pack-6-0-debuginforedhat-upgrade-dotnet-apphost-pack-7-0redhat-upgrade-dotnet-apphost-pack-7-0-debuginforedhat-upgrade-dotnet-hostredhat-upgrade-dotnet-host-debuginforedhat-upgrade-dotnet-hostfxr-3-1redhat-upgrade-dotnet-hostfxr-3-1-debuginforedhat-upgrade-dotnet-hostfxr-6-0redhat-upgrade-dotnet-hostfxr-6-0-debuginforedhat-upgrade-dotnet-hostfxr-7-0redhat-upgrade-dotnet-hostfxr-7-0-debuginforedhat-upgrade-dotnet-runtime-3-1redhat-upgrade-dotnet-runtime-3-1-debuginforedhat-upgrade-dotnet-runtime-6-0redhat-upgrade-dotnet-runtime-6-0-debuginforedhat-upgrade-dotnet-runtime-7-0redhat-upgrade-dotnet-runtime-7-0-debuginforedhat-upgrade-dotnet-sdk-3-1redhat-upgrade-dotnet-sdk-3-1-debuginforedhat-upgrade-dotnet-sdk-3-1-source-built-artifactsredhat-upgrade-dotnet-sdk-6-0redhat-upgrade-dotnet-sdk-6-0-debuginforedhat-upgrade-dotnet-sdk-6-0-source-built-artifactsredhat-upgrade-dotnet-sdk-7-0redhat-upgrade-dotnet-sdk-7-0-debuginforedhat-upgrade-dotnet-sdk-7-0-source-built-artifactsredhat-upgrade-dotnet-targeting-pack-3-1redhat-upgrade-dotnet-targeting-pack-6-0redhat-upgrade-dotnet-targeting-pack-7-0redhat-upgrade-dotnet-templates-3-1redhat-upgrade-dotnet-templates-6-0redhat-upgrade-dotnet-templates-7-0redhat-upgrade-dotnet3-1-debuginforedhat-upgrade-dotnet3-1-debugsourceredhat-upgrade-dotnet6-0-debuginforedhat-upgrade-dotnet6-0-debugsourceredhat-upgrade-dotnet7-0-debuginforedhat-upgrade-dotnet7-0-debugsourceredhat-upgrade-netstandard-targeting-pack-2-1 | Oct 20, 2022 | Oct 11, 2022 | |
| Rocky_linux | rocky-upgrade-aspnetcore-runtime-3.1rocky-upgrade-aspnetcore-runtime-6.0rocky-upgrade-aspnetcore-targeting-pack-3.1rocky-upgrade-aspnetcore-targeting-pack-6.0rocky-upgrade-dotnetrocky-upgrade-dotnet-apphost-pack-3.1rocky-upgrade-dotnet-apphost-pack-3.1-debuginforocky-upgrade-dotnet-apphost-pack-6.0rocky-upgrade-dotnet-apphost-pack-6.0-debuginforocky-upgrade-dotnet-hostrocky-upgrade-dotnet-host-debuginforocky-upgrade-dotnet-hostfxr-3.1rocky-upgrade-dotnet-hostfxr-3.1-debuginforocky-upgrade-dotnet-hostfxr-6.0rocky-upgrade-dotnet-hostfxr-6.0-debuginforocky-upgrade-dotnet-runtime-3.1rocky-upgrade-dotnet-runtime-3.1-debuginforocky-upgrade-dotnet-runtime-6.0rocky-upgrade-dotnet-runtime-6.0-debuginforocky-upgrade-dotnet-sdk-3.1rocky-upgrade-dotnet-sdk-3.1-debuginforocky-upgrade-dotnet-sdk-3.1-source-built-artifactsrocky-upgrade-dotnet-sdk-6.0rocky-upgrade-dotnet-sdk-6.0-debuginforocky-upgrade-dotnet-sdk-6.0-source-built-artifactsrocky-upgrade-dotnet-targeting-pack-3.1rocky-upgrade-dotnet-targeting-pack-6.0rocky-upgrade-dotnet-templates-3.1rocky-upgrade-dotnet-templates-6.0rocky-upgrade-dotnet3.1-debuginforocky-upgrade-dotnet6.0-debuginforocky-upgrade-netstandard-targeting-pack-2.1 | Mar 12, 2024 | Oct 11, 2022 | |
| Ubuntu | ubuntu-upgrade-aspnetcore-runtime-6-0ubuntu-upgrade-dotnet-hostubuntu-upgrade-dotnet-hostfxr-6-0ubuntu-upgrade-dotnet-runtime-6-0ubuntu-upgrade-dotnet-sdk-6-0ubuntu-upgrade-dotnet6 | Mar 22, 2023 | Oct 11, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Oct 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub