You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
.net vulnerability
About this tag
The .net vulnerability tag covers critical security flaws in Microsoft's .NET framework, including elevation-of-privilege (EoP) and remote code execution (RCE) issues. Recent discussions focus on CVE-2025-55247, a link-following local privilege escalation with a CVSS score of 7.3, and CVE-2025-21173, another EoP vulnerability requiring immediate patching. Also covered is CVE-2025-21171, a .NET RCE vulnerability that poses significant risk to Windows systems and applications. These threads provide technical breakdowns, impact assessments, and mitigation steps for administrators and developers. The tag is relevant for anyone managing Windows environments or building .NET applications who needs to stay informed about high-severity vulnerabilities and Microsoft's security updates.
Microsoft has published an advisory for CVE-2025-55247, a .NET elevation-of-privilege vulnerability rooted in improper link resolution before file access (commonly called “link following”), which can allow an authorized local user to escalate privileges on affected systems; industry trackers...
Attention, Windows users and developers—Microsoft has made headlines once again with the release of a security update addressing a critical vulnerability. The new vulnerability, tracked as CVE-2025-21173, is classified as an Elevation of Privilege (EoP) issue targeting Microsoft's .NET...
Ah, Microsoft. Never failing to keep security professionals on their toes. Barely two weeks into 2025, and we already have big news rippling through the security landscape. Enter CVE-2025-21171, a newly disclosed .NET Remote Code Execution (RCE) vulnerability that could become the hottest topic...