CVE-2024-29059: Microsoft .NET Framework error message information disclosure

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 16 September 2026. Confidence: medium.

critical priorityThe flaw is in CISA's Known Exploited Vulnerabilities catalog with active exploitation and an EPSS score above the 99th percentile, despite a CVSS base of 7.5.

What it is

CVE-2024-29059 is an information disclosure flaw in Microsoft .NET Framework, classified as CWE-209 (error message information leak). A remote, unauthenticated attacker can trigger error responses that expose sensitive information, and the flaw is listed in CISA's Known Exploited Vulnerabilities catalog, so it is being exploited in the wild.

Impact

An attacker gains access to information leaked through error messages, which can reveal internal details useful for follow-on attacks. The CVSS vector rates confidentiality impact as high with no integrity or availability impact.

Attack surface

The vector is network-reachable (AV:N) with no privileges (PR:N) and no user interaction (UI:N), so it can be triggered remotely against an exposed .NET Framework service or application. No authentication is required.

Exploitation

CISA added this to the Known Exploited Vulnerabilities catalog on 2025-02-04 with a remediation due date of 2025-02-25, confirming active exploitation. EPSS is 0.98624 (99.9th percentile), indicating very high predicted exploitation activity; no ransomware campaign use is documented.

What to do

• Apply the Microsoft security update for CVE-2024-29059 per the MSRC advisory as the first action.
• If patching is not immediately possible, follow CISA's required action: apply vendor mitigations or discontinue use of the affected product.
• Suppress verbose error output and stack traces in .NET Framework applications so internal details are not returned to clients.
• Restrict network exposure of .NET Framework services to trusted networks and monitor for anomalous error-triggering requests.

Detection

• Monitor application and web server logs for spikes in error responses or repeated requests designed to trigger exceptions.
• Review outbound responses for stack traces, file paths, or configuration details that should not be exposed.
• Correlate network traffic to .NET Framework endpoints with known exploitation patterns and alert on unusual request volumes.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.