GHSA-5RRX-JJJQ-Q2R5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability

Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 10.0 , ASP.NET Core 9.0 , ASP.NET Core 8.0, and ASP.NET Core 2.3. This advisory also...

CVE-2025-55248

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network...

CVE-2025-55315

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an authorized attacker to bypass a security feature over a network...

CVE-2025-55248 .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

...

CVE-2025-55248 .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

...

CVE-2025-55248

CVE-2025-55248 is an information-disclosure vulnerability in the .NET ecosystem (affecting .NET 8.0/9.0 runtimes) caused by insufficient encryption, enabling an authorized network attacker to access leaked data. The issue is discussed in Microsoft and ENISA/ALMAS advisories, which indicate affect...

CVE-2025-55247 .NET Elevation of Privilege Vulnerability

...

CVE-2025-55247

CVE-2025-55247 is a local elevation-of-privilege vulnerability in .NET caused by improper link resolution before file access ("link following"). The issue affects .NET 8.0.x, 9.0.x, and 10.0.x on Linux (per the advisories) and can be triggered by an authorized user. Mitigation is to update to fix...

CVE-2025-55247 .NET Elevation of Privilege Vulnerability

...

2025-10 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2 for x64 (KB5066129)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 (KB5066738)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 (KB5066742)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 .NET 9.0.10 Security Update for x64 Server (KB5068332)

2025-10 .NET 9.0.10 Security Update for x64 Server KB5068332...

2025-10 .NET 9.0.10 Security Update for x86 Client (KB5068332)

2025-10 .NET 9.0.10 Security Update for x86 Client KB5068332...

2025-10 Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 for x64 (KB5066742)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 .NET 9.0.10 Security Update for x64 Client (KB5068332)

2025-10 .NET 9.0.10 Security Update for x64 Client KB5068332...

2025-10 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5066136)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 .NET 8.0.21 Security Update for x64 Client (KB5068331)

2025-10 .NET 8.0.21 Security Update for x64 Client KB5068331...

2025-10 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 for x64 (KB5066136)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 (KB5066747)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...