Microsoft .NET Framework Information Disclosure Vulnerability

Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution...

dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET...

dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET...

dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET...

Security Updates for Microsoft .NET Framework (January 2025)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple denial of service vulnerabilities, as follows: - A remote code execution vulnerability. An attacker can exploit this issue to cause the affected component to execute...

Microsoft .NET Framework RCE Vulnerability (KB5049614)

This host is missing an important security update according to Microsoft KB5049614 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft .NET Framework RCE Vulnerability (KB5050416)

This host is missing an important security update according to Microsoft KB5050416 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft .NET Framework RCE Vulnerability (KB5050182)

This host is missing an important security update according to Microsoft KB5050182 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft .NET Framework RCE Vulnerability (KB5049624)

This host is missing an important security update according to Microsoft KB5049624 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft .NET Framework RCE Vulnerability (KB5050188)

This host is missing an important security update according to Microsoft KB5050188 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2025-21176

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET. Mitigation Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affecte...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in Visual Studio and .NET. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, access sensitive data or execute arbitrary code in the victim's context. Successful exploitation requires the malicious party to trick the...

CVE-2025-21173

.NET Elevation of Privilege Vulnerability...

CVE-2025-21176

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...

CVE-2025-21176 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

...

CVE-2025-21176

CVE-2025-21176 is a remote code execution vulnerability affecting .NET/.NET Framework and Visual Studio components. Public sources describe a buffer over-read in DiaSymReader.dll not checking length when processing symbolic data, impacting EOL ASP.NET 6.0.0–6.0.36 and also 8.0.0–8.0.11 and up to ...

CVE-2025-21176

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...

CVE-2025-21176 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

...

2025-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 23H2 for x64 (KB5049624)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-01 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5049614)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...