← Back

CVE-2025-30399

nvd nist
Published: Jun 13, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.6 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

Affected (8)

Microsoft
3 products
Visual Studio 2022
.net
Powershell
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Visual Studio 2022
From 17.10.0 to 17.10.16
Visual Studio 2022
From 17.12.0 to 17.12.9
Visual Studio 2022
From 17.14.0 to 17.14.5
Visual Studio 2022
From 17.8.0 to 17.8.22
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
.net
From 9.0.0 to 9.0.6
Configuration C
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
.net
From 8.0.0 to 8.0.17
Running on/withPlatform Versions
Apple
Macos
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Powershell
From 7.4 to 7.4.11
Powershell
From 7.5 to 7.5.2

Related CWEs

CWE-426
Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.