Remote Code Execution Vulnerability in .NET and Visual Studio by Microsoft
CVE-2025-21172
7.5HIGH
Key Information:
Summary
This vulnerability allows an attacker to execute arbitrary code on a system running affected versions of .NET and Visual Studio. Successful exploitation could allow an attacker to gain access to sensitive information or execute commands with the privileges of the victim. Users are encouraged to apply the latest patches provided by Microsoft to mitigate the risks associated with this security flaw.
Affected Version(s)
.NET 8.0 Unknown 8.0.0 < 8.0.12
.NET 9.0 Unknown 9.0.0 < 9.0.1
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Unknown 15.9.0 < 15.9.69
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved