p PatchFirst

CVE-2025-55248

CVE-2025-55248 · .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.

CVSS 4.8 · Medium · EPSS 0.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • .net 8.0

    Versions
    • ≥ 8.0.0, < 8.0.21: Affected (custom)

    Update to 8.0.21

  • .net 9.0

    Versions
    • ≥ 9.0.0, < 9.0.10: Affected (custom)

    Update to 9.0.10

  • microsoft .net framework 2.0 service pack 2

    Versions
    • ≥ 2.0.0, < 2.0.50727.8981: Affected (custom)

    Update to 2.0.50727.8981

  • microsoft .net framework 3.0 service pack 2

    Versions
    • ≥ 3.0.0, < 2.0.50727.8981: Affected (custom)

    No fix published

  • microsoft .net framework 3.5

    Versions
    • ≥ 3.5.0, < 2.0.50727.8981: Affected (custom)

    No fix published

  • microsoft .net framework 3.5 and 4.7.2

    Versions
    • ≥ 4.7.0, < 4.7.04137.03: Affected (custom)

    Update to 4.7.04137.03

  • microsoft .net framework 3.5 and 4.8

    Versions
    • ≥ 4.8.0, < 4.8.04798.02: Affected (custom)

    Update to 4.8.04798.02

  • microsoft .net framework 3.5 and 4.8.1

    Versions
    • ≥ 4.8.1, < 4.8.1.09320.02: Affected (custom)

    Update to 4.8.1.09320.02

  • microsoft .net framework 3.5.1

    Versions
    • ≥ 3.5.0, < 2.0.50727.8981: Affected (custom)

    No fix published

  • microsoft .net framework 4.6.2

    Versions
    • ≥ 4.7.0, < 4.7.04137.03: Affected (custom)

    Update to 4.7.04137.03

  • microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2

    Versions
    • ≥ 4.7.0, < 4.7.04137.03: Affected (custom)

    Update to 4.7.04137.03

  • microsoft .net framework 4.8

    Versions
    • ≥ 4.8.0, < 4.8.04798.02: Affected (custom)

    Update to 4.8.04798.02

  • microsoft visual studio 2022 version 17.10

    Versions
    • ≥ 17.10.0, < 17.10.20: Affected (custom)

    Update to 17.10.20

  • microsoft visual studio 2022 version 17.12

    Versions
    • ≥ 17.12.0, < 17.12.13: Affected (custom)

    Update to 17.12.13

  • microsoft visual studio 2022 version 17.14

    Versions
    • ≥ 17.14.0, < 17.14.17: Affected (custom)

    Update to 17.14.17

  • dotnet6 Ubuntu:22.04:LTS

    Versions
    • 6.0.108-0ubuntu1~22.04.1
    • 6.0.109-0ubuntu1~22.04.1
    • 6.0.110-0ubuntu1~22.04.1
    • 6.0.111-0ubuntu1~22.04.1
    • 6.0.113-0ubuntu1~22.04.1
    • 6.0.116-0ubuntu1~22.04.1
    • 6.0.118-0ubuntu1~22.04.1
    • 6.0.119-0ubuntu1~22.04.1
    • 6.0.120-0ubuntu1~22.04.1
    • 6.0.121-0ubuntu1~22.04.1
    • 6.0.122-0ubuntu1~22.04.1
    • 6.0.123-0ubuntu1~22.04.1
    • 6.0.124-0ubuntu1~22.04.1
    • 6.0.125-0ubuntu1~22.04.1
    • 6.0.126-0ubuntu1~22.04.1
    • 6.0.127-0ubuntu1~22.04.1
    • 6.0.128-0ubuntu1~22.04.2
    • 6.0.132-0ubuntu1~22.04.1
    • 6.0.133-0ubuntu1~22.04.1
    • 6.0.135-0ubuntu1~22.04.1
    • 6.0.136-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    • 7.0.109-0ubuntu1~22.04.1
    • 7.0.110-0ubuntu1~22.04.1
    • 7.0.111-0ubuntu1~22.04.1
    • 7.0.112-0ubuntu1~22.04.1
    • 7.0.113-0ubuntu1~22.04.1
    • 7.0.114-0ubuntu1~22.04.1
    • 7.0.115-0ubuntu1~22.04.1
    • 7.0.116-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.2
    • 7.0.119-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • dotnet8 Ubuntu:22.04:LTS

    Versions
    • 8.0.102-8.0.2-0ubuntu1~22.04.1
    • 8.0.103-8.0.3-0ubuntu1~22.04.1
    • 8.0.103-8.0.3-0ubuntu1~22.04.2
    • 8.0.105-8.0.5-0ubuntu1~22.04.1
    • 8.0.107-8.0.7-0ubuntu1~22.04.1
    • 8.0.108-8.0.8-0ubuntu1~22.04.1
    • 8.0.110-8.0.10-0ubuntu1~22.04.1
    • 8.0.111-8.0.11-0ubuntu1~22.04.1
    • 8.0.112-8.0.12-0ubuntu1~22.04.1
    • 8.0.114-8.0.14-0ubuntu1~22.04.1
    • 8.0.115-8.0.15-0ubuntu1~22.04.1
    • 8.0.116-8.0.16-0ubuntu1~22.04.1
    • 8.0.117-8.0.17-0ubuntu1~22.04.1
    • 8.0.118-8.0.18-0ubuntu1~22.04.1
    • 8.0.119-8.0.19-0ubuntu1~22.04.1
    • 8.0.120-8.0.20-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: < 8.0.121-8.0.21-0ubuntu1~22.04.1

    Update to 8.0.121-8.0.21-0ubuntu1~22.04.1

  • dotnet8 Ubuntu:24.04:LTS

    Versions
    • 8.0.100-8.0.0~rc1-0ubuntu1
    • 8.0.100-8.0.0~rc2-0ubuntu1
    • 8.0.100-8.0.0~rc2-0ubuntu2
    • 8.0.100-8.0.0-0ubuntu1
    • 8.0.100-8.0.0-0ubuntu2
    • 8.0.101-8.0.1-0ubuntu1
    • 8.0.101-8.0.1-0ubuntu2
    • 8.0.102-8.0.2-0ubuntu1
    • 8.0.103-8.0.3-0ubuntu2
    • 8.0.103-8.0.3-0ubuntu3
    • 8.0.104-8.0.4-0ubuntu1
    • 8.0.105-8.0.5-0ubuntu1~24.04.1
    • 8.0.107-8.0.7-0ubuntu1~24.04.1
    • 8.0.108-8.0.8-0ubuntu1~24.04.1
    • 8.0.108-8.0.8-0ubuntu1~24.04.2
    • 8.0.110-8.0.10-0ubuntu1~24.04.1
    • 8.0.111-8.0.11-0ubuntu1~24.04.1
    • 8.0.112-8.0.12-0ubuntu1~24.04.1
    • 8.0.114-8.0.14-0ubuntu1~24.04.1
    • 8.0.115-8.0.15-0ubuntu1~24.04.1
    • 8.0.116-8.0.16-0ubuntu1~24.04.1
    • 8.0.117-8.0.17-0ubuntu1~24.04.1
    • 8.0.118-8.0.18-0ubuntu1~24.04.1
    • 8.0.119-8.0.19-0ubuntu1~24.04.1
    • 8.0.120-8.0.20-0ubuntu1~24.04.1
    Affected ranges
    • ECOSYSTEM: < 8.0.121-8.0.21-0ubuntu1~24.04.1

    Update to 8.0.121-8.0.21-0ubuntu1~24.04.1

  • dotnet8 Ubuntu:25.10

    Versions
    • 8.0.115-8.0.15-0ubuntu1
    • 8.0.116-8.0.16-0ubuntu1
    • 8.0.117-8.0.17-0ubuntu1
    • 8.0.118-8.0.18-0ubuntu1
    • 8.0.119-8.0.19-0ubuntu1
    • 8.0.120-8.0.20-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 8.0.121-8.0.21-0ubuntu1~25.10.1

    Update to 8.0.121-8.0.21-0ubuntu1~25.10.1

  • dotnet9 Ubuntu:25.10

    Versions
    • 9.0.105-9.0.4-0ubuntu1
    • 9.0.106-9.0.5-0ubuntu1
    • 9.0.107-9.0.6-0ubuntu1
    • 9.0.108-9.0.7-0ubuntu1
    • 9.0.109-9.0.8-0ubuntu1
    • 9.0.110-9.0.9-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 9.0.111-9.0.10-0ubuntu1~25.10.1

    Update to 9.0.111-9.0.10-0ubuntu1~25.10.1

Original sources

Check your server →