← Back

CVE-2025-21173

nvd nist
Published: Jan 14, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.3 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

.NET Elevation of Privilege Vulnerability

Affected (6)

Microsoft
2 products
Visual Studio 2022
.net
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Visual Studio 2022
From 17.10.0 to 17.10.10
Visual Studio 2022
From 17.12.0 to 17.12.4
Visual Studio 2022
From 17.6.0 to 17.6.22
Visual Studio 2022
From 17.8.0 to 17.8.17
Configuration B
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Microsoft
.net
Version 8.0.0
.net
Version 9.0.0
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-379
Creation of Temporary File in Directory with Insecure Permissions
The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.

References (2)

Source: secure@microsoft.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.