This security bulletin contains one medium risk vulnerability.
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in .NET Core and Visual Studio. A remote attacker can trick a victim to open a specially crafted file and perform a denial of service (DoS) attack.Mitigation
Install updates from vendor's website.Vulnerable software versions
Visual Studio: before 17.7.4 17.7.34031.279
.NET: before 7.0.11Fixed software versions
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?