p PatchFirst

CVE-2025-30399

CVE-2025-30399 · .NET and Visual Studio Remote Code Execution Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

CVSS 7.5 · High · EPSS 1.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • .net 8.0

    Versions
    • ≥ 8.0.0, < 8.0.17: Affected (custom)

    Update to 8.0.17

  • .net 9.0

    Versions
    • ≥ 9.0.0, < 9.0.6: Affected (custom)

    Update to 9.0.6

  • microsoft visual studio 2022 version 17.10

    Versions
    • ≥ 17.10.0, < 17.10.16: Affected (custom)

    Update to 17.10.16

  • microsoft visual studio 2022 version 17.12

    Versions
    • ≥ 17.12.0, < 17.12.9: Affected (custom)

    Update to 17.12.9

  • microsoft visual studio 2022 version 17.14

    Versions
    • ≥ 17.14.0, < 17.14.5: Affected (custom)

    Update to 17.14.5

  • microsoft visual studio 2022 version 17.8

    Versions
    • ≥ 17.8.0, < 17.8.22: Affected (custom)

    Update to 17.8.22

  • powershell 7.4

    Versions
    • ≥ 7.4.0, < 7.4.11: Affected (custom)

    Update to 7.4.11

  • powershell 7.5

    Versions
    • ≥ 7.5.0, < 7.5.2: Affected (custom)

    Update to 7.5.2

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    • 7.0.109-0ubuntu1~22.04.1
    • 7.0.110-0ubuntu1~22.04.1
    • 7.0.111-0ubuntu1~22.04.1
    • 7.0.112-0ubuntu1~22.04.1
    • 7.0.113-0ubuntu1~22.04.1
    • 7.0.114-0ubuntu1~22.04.1
    • 7.0.115-0ubuntu1~22.04.1
    • 7.0.116-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.2
    • 7.0.119-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • dotnet8 Ubuntu:22.04:LTS

    Versions
    • 8.0.102-8.0.2-0ubuntu1~22.04.1
    • 8.0.103-8.0.3-0ubuntu1~22.04.1
    • 8.0.103-8.0.3-0ubuntu1~22.04.2
    • 8.0.105-8.0.5-0ubuntu1~22.04.1
    • 8.0.107-8.0.7-0ubuntu1~22.04.1
    • 8.0.108-8.0.8-0ubuntu1~22.04.1
    • 8.0.110-8.0.10-0ubuntu1~22.04.1
    • 8.0.111-8.0.11-0ubuntu1~22.04.1
    • 8.0.112-8.0.12-0ubuntu1~22.04.1
    • 8.0.114-8.0.14-0ubuntu1~22.04.1
    • 8.0.115-8.0.15-0ubuntu1~22.04.1
    • 8.0.116-8.0.16-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 8.0.117-8.0.17-0ubuntu1~22.04.1

    Update to 8.0.117-8.0.17-0ubuntu1~22.04.1

  • dotnet8 Ubuntu:24.04:LTS

    Versions
    • 8.0.100-8.0.0~rc1-0ubuntu1
    • 8.0.100-8.0.0~rc2-0ubuntu1
    • 8.0.100-8.0.0~rc2-0ubuntu2
    • 8.0.100-8.0.0-0ubuntu1
    • 8.0.100-8.0.0-0ubuntu2
    • 8.0.101-8.0.1-0ubuntu1
    • 8.0.101-8.0.1-0ubuntu2
    • 8.0.102-8.0.2-0ubuntu1
    • 8.0.103-8.0.3-0ubuntu2
    • 8.0.103-8.0.3-0ubuntu3
    • 8.0.104-8.0.4-0ubuntu1
    • 8.0.105-8.0.5-0ubuntu1~24.04.1
    • 8.0.107-8.0.7-0ubuntu1~24.04.1
    • 8.0.108-8.0.8-0ubuntu1~24.04.1
    • 8.0.108-8.0.8-0ubuntu1~24.04.2
    • 8.0.110-8.0.10-0ubuntu1~24.04.1
    • 8.0.111-8.0.11-0ubuntu1~24.04.1
    • 8.0.112-8.0.12-0ubuntu1~24.04.1
    • 8.0.114-8.0.14-0ubuntu1~24.04.1
    • 8.0.115-8.0.15-0ubuntu1~24.04.1
    • 8.0.116-8.0.16-0ubuntu1~24.04.1
    Affected ranges
    • ECOSYSTEM: < 8.0.117-8.0.17-0ubuntu1~24.04.1

    Update to 8.0.117-8.0.17-0ubuntu1~24.04.1

Original sources

Check your server →