Affected: Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.8, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.14 and 1 more

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.