CVE-2022-24512

MEDIUM

.NET Remote Code Execution Vulnerability

Published October 18, 2022Updated June 8, 2026Source: osv

Summary

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0, and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A Remote Code Execution vulnerability exists in .NET 6.0, .NET 5.0, and .NET Core 3.1 where a stack buffer overrun occurs in .NET Double Parse routine. ### Patches * Any .NET 6.0 application running on .NET 6.0.2 or lower * Any .NET 5.0 application running on .NET 5.0.14 or lower * Any .NET Core 3.1 application running on .NET Core 3.1.22 or lower To fix the issue, please install the latest version of .NET 6.0, .NET 5.0, or .NET Core 3.1. If you have installed one or more .NET Core SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET Core SDKs. * If you're using .NET 6.0, you should download and install Runtime 6.0.3 or SDK 6.0.103 (for Visual Studio 2019 v17.0) or SDK 6.0.201 (for Visual Studio 2019 V17.1) from https://dotnet.microsoft.com/download/dotnet-core/5.0. * If you're using .NET 5.0, you should download and install Runtime 5.0.15 or SDK 5.0.406 (for Visual Studio 2019 v16.11) or SDK 5.0.212 (for Visual Studio 2019 V16.9) from https://dotnet.microsoft.com/download/dotnet-core/5.0. * If you're using .NET Core 3.1, you should download and install Runtime 3.1.23 or SDK 3.1.417 (for Visual Studio 2019 v16.7) from https://dotnet.microsoft.com/download/dotnet-core/3.1. .NET 6.0, .NET 5.0, and .NET Core 3.1 updates are also available from Microsoft Update. To access this either type "Check for updates" in your Windows search, or open Settings, choose Update & Security and then click Check for Updates. ### Other Details - Announcement for this issue can be found at dotnet/announcements#213 - An Issue for this can be found at https://github.com/dotnet/runtime/issues/66348 - MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512

Remediation

Upgrade to the fixed version using your package manager.

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.osx-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.osx-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.osx-x64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.osx-x64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.osx-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.osx-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-arm to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.osx-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.osx-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-x64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.win-x64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.win-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.win-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.win-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.win-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x86 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x86 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.osx-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.osx-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.browser-wasm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.browser-wasm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.osx-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.osx-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.osx-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.osx-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-musl-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-musl-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-arm to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-arm --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-x86 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-x86 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.linux-arm64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-arm64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.win-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.win-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.linux-arm to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.linux-arm --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.linux-x64 to 3.1.23 or later

dotnet add package Microsoft.NETCore.App.Runtime.linux-x64 --version 3.1.23

NuGet

Update Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 to 5.0.15 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 --version 5.0.15

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 --version 6.0.3

NuGet

Update Microsoft.NETCore.App.Runtime.Mono.ios-arm64 to 6.0.3 or later

dotnet add package Microsoft.NETCore.App.Runtime.Mono.ios-arm64 --version 6.0.3

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (147)

Package	Ecosystem	Affected	Fixed In
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.osx-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.osx-x64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-arm	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.android-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-arm64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.osx-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.osx-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.win-arm	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-x64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.win-x64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.Mono.win-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.win-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-musl-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.win-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x86	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-arm	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.Mono.osx-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.osx-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.osx-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-musl-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.linux-arm	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-arm64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-arm	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.android-x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-x86	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.win-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.linux-arm64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.win-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.linux-x64	nuget	3.0.0, 3.0.1, 3.0.2, 3.0.3 (+23 more)	3.1.23
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64	nuget	5.0.0, 5.0.1, 5.0.10, 5.0.11 (+11 more)	5.0.15
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64	nuget	6.0.0, 6.0.1, 6.0.2	6.0.3

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-94
Code InjectionMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 6.3 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

References

Frequently Asked Questions

What is CVE-2022-24512?: .NET Remote Code Execution Vulnerability This vulnerability has been assigned a severity rating of MEDIUM (CVSS score: 6.3/10).
How do I check if my project is affected by CVE-2022-24512?: CVE-2022-24512 affects Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm and Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 (and 112 more). Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2022-24512 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

6.3

Exploitation requires specific conditions or has limited impact. Remediate within weeks.

Also Known As

GHSA-c6w8-7mp3-34j9

BIT-dotnet-2022-24512

BIT-dotnet-sdk-2022-24512

BIT-powershell-2022-24512

Related CVEs

CVE-2026-71437
MEDIUM
Mermaid Architecture diagrams are vulnerable to prototype pollution
CVE-2026-65602
MEDIUM
Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass
CVE-2020-8927
MEDIUM
Integer overflow in the bundled Brotli C library
CVE-2026-54765
MEDIUM
Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port
CVE-2026-62909
MEDIUM
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
CVE-2026-62902
MEDIUM
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
CVE-2026-61807
MEDIUM
Snipe-IT: Stored DOM XSS via table selected-count IDs
CVE-2026-62899
MEDIUM
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies