CVE-2025-55247 — .NET Elevation of Privilege Vulnerability

Affected: Microsoft .NET 8.0, Microsoft .NET 9.0

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

USN-7822-1 — dotnet8, dotnet9, dotnet10 vulnerabilities

Affected: Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet8, Ubuntu:25.10: dotnet10, Ubuntu:25.10: dotnet8, Ubuntu:25.10: dotnet9

It was discovered that .NET did not properly handle the creation of temporary build time directories. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-55247)

It was discovered that .NET did not properly establish TLS sessions for SMTP server connections. An attacker could use this issue to cause .NET to use unencrypted connections. This issue only affects .NET versions 8.0 and 9.0. (CVE-2025-55248)

It was discovered that .NET inconsistently interpreted certain http requests. An attacker could possibly use this to bypass a security feature over a network. (CVE-2025-55315)

Most recent entries from all

CVE-2025-55247 — .NET Elevation of Privilege Vulnerability

USN-7822-1 — dotnet8, dotnet9, dotnet10 vulnerabilities