Microsoft .NET Framework CVE-2024-29059 Information Disclosure Vulnerability

Description

Information disclosure via error messages exposing ObjRef URI, potentially enabling remote code execution, affecting .NET Framework 3.5, 4.7-4.8 on Windows 10 1607/1809 and Windows Server 2019.

Outbreak Alert

Threat Actors are targeting and actively exploiting a Microsoft .NET Framework information disclosure vulnerability (CVE-2024-29059) that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.

View the full Outbreak Alert Report

Affected Applications

Windows Server 2008
Windows Server 2012
Windows Server 2016
Windows Server 2019
Windows Server 2022
Windows 10
Windows 11

References