The vulnerability of the Microsoft .NET software platform, Microsoft .NET Framework, and the Visual Studio source editor arises from allowing operations beyond the buffer boundaries in memory, enabling an attacker to execute arbitrary code.

🗓️ 08 Oct 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

A vulnerability in the Dot Net Framework and Visual Studio allows buffer overrun enabling remote code execution.

Reporter	Title	Published	Views	Family All 21
Circl	CVE-2025-36855	8 Sep 202515:11	–	circl
CNNVD	Microsoft .NET 安全漏洞	8 Sep 202500:00	–	cnnvd
CVE	CVE-2025-36855	8 Sep 202513:57	–	cve
Cvelist	CVE-2025-36855 EOL .NET 6.0 Runtime Remote Code Execution Vulnerability	8 Sep 202513:57	–	cvelist
EUVD	EUVD-2025-27125	3 Oct 202520:07	–	euvd
NVD	CVE-2025-36855	8 Sep 202514:15	–	nvd
Positive Technologies	PT-2025-36469	8 Sep 202500:00	–	ptsecurity
Redos	ROS-20251002-03	2 Oct 202500:00	–	redos
Snyk	Buffer Over-read	8 Sep 202514:41	–	snyk
Snyk	Buffer Over-read	8 Sep 202514:41	–	snyk

Vulners

Node

microsoft microsoft_visual_studio_2017Range15.0–15.9

OR

microsoft microsoft_visual_studio_2022Match17.6

OR

microsoft microsoft_visual_studio_2019Range16.0–16.10

OR

microsoft .netMatch8.0

OR

microsoft .netMatch9.0

OR

microsoft microsoft_visual_studio_2022Match17.12

OR

microsoft microsoft_visual_studio_2022Match17.10

OR

microsoft microsoft_visual_studio_2022Match17.8

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21176
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
web	www.web.nvd.nist.gov/view/vuln/detail

08 Oct 2025 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 38.8

CVSS 210

EPSS0.00719

dotnet framework visual studio buffer overrun remote code execution memory vulnerability