CVE-2024-53326

HIGH

LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(), leading to code execution.

StatusAwaiting Analysis

설명

LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(), leading to code execution.

Score Summary

CVSS Score: 7.3
Version: 3.1
VPI: 73
Why this VPI (explainable, experimental)
VPI breakdown
Impact 73.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 73.00
VPI formula vpi-v1
EPSS: 0.5%
(상위 38.8%)
Attack Vector: Local Access
Low Complexity
Low Privileges
User Interaction Required
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

CWE Weakness Classification

References (2)

Impact	73.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	73.00