p PatchFirst

CVE-2025-21171

CVE-2025-21171 · .NET Remote Code Execution Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

.NET Remote Code Execution Vulnerability

CVSS 7.5 · High · EPSS 1.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • .net 9.0

    Versions
    • ≥ 9.0.0, < 9.0.1: Affected (custom)

    Update to 9.0.1

  • microsoft visual studio 2022 version 17.10

    Versions
    • ≥ 17.10.0, < 17.10.10: Affected (custom)

    Update to 17.10.10

  • microsoft visual studio 2022 version 17.12

    Versions
    • ≥ 17.12.0, < 17.12.4: Affected (custom)

    Update to 17.12.4

  • microsoft visual studio 2022 version 17.6

    Versions
    • ≥ 17.6.0, < 17.6.22: Affected (custom)

    Update to 17.6.22

  • microsoft visual studio 2022 version 17.8

    Versions
    • ≥ 17.8.0, < 17.8.17: Affected (custom)

    Update to 17.8.17

  • powershell 7.5

    Versions
    • ≥ 7.5.0, < 7.5.0: Affected (custom)

    No fix published

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    • 7.0.109-0ubuntu1~22.04.1
    • 7.0.110-0ubuntu1~22.04.1
    • 7.0.111-0ubuntu1~22.04.1
    • 7.0.112-0ubuntu1~22.04.1
    • 7.0.113-0ubuntu1~22.04.1
    • 7.0.114-0ubuntu1~22.04.1
    • 7.0.115-0ubuntu1~22.04.1
    • 7.0.116-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.2
    • 7.0.119-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →