Every CVE Search/ Get API key

CVE-2025-21173

.NET Elevation of Privilege Vulnerability

7.3 HighFix available

.NET Elevation of Privilege Vulnerability

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.30%Up 1.3 points since Jan 15, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.3

.NET Elevation of Privilege Vulnerability

.NET Elevation of Privilege Vulnerability

Record
CVE-2025-21173
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Weakness
CWE-379
Updated
2026-11-02
EUVDEUVD-2025-2256 7.3

.NET Elevation of Privilege Vulnerability

Record
EUVD-2025-2256
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-mvph-h5j7-4h2g 7.3

.NET Elevation of Privilege Vulnerability

.NET Elevation of Privilege Vulnerability

Record
GHSA-mvph-h5j7-4h2g
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-284, CWE-379
Updated
2026-11-02
NVD 7.3

.NET Elevation of Privilege Vulnerability

Record
CVE-2025-21173
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-379
Updated
2026-11-02
OSVALPINE-CVE-2025-21173 7.3

.NET Elevation of Privilege Vulnerability

Record
ALPINE-CVE-2025-21173
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2025-21173 7.3
Record
BELL-CVE-2025-21173
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 14 moreShow less
OSV 7.3

.NET Elevation of Privilege Vulnerability

Record
CVE-2025-21173
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHBA-2025:0304 8.8

Red Hat Bug Fix Advisory: .NET 8.0 bug fix and enhancement update

Record
RHBA-2025:0304
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHBA-2025:0305 8.8

Red Hat Bug Fix Advisory: .NET 9.0 bug fix and enhancement update

Record
RHBA-2025:0305
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:0381 8.8

Red Hat Security Advisory: .NET 8.0 security update

Record
RHSA-2025:0381
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:0382 8.8

Red Hat Security Advisory: .NET 9.0 security update

Record
RHSA-2025:0382
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:0532 8.8

Red Hat Security Advisory: .NET 8.0 security update

Record
RHSA-2025:0532
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-21173 7.3

.NET Elevation of Privilege Vulnerability

Record
UBUNTU-CVE-2025-21173
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:0381 No score

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.112 and .NET Runtime 8.0.1.12.

Security Fix(es):

  • dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  • dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  • dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

  • dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  • dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)
  • dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:0381
Updated
2026-11-02
OSVALSA-2025:0382 No score

Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.102 and .NET Runtime 9.0.1.

Security Fix(es):

  • dotnet: .NET Remote Code Execution Vulnerability (CVE-2025-21171)
  • dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  • dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  • dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

  • dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  • dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)
  • dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  • dotnet: .NET Remote Code Execution Vulnerability (CVE-2025-21171)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:0382
Updated
2026-11-02
OSVBIT-dotnet-2025-21173 No score

.NET Elevation of Privilege Vulnerability

.NET Elevation of Privilege Vulnerability

Record
BIT-dotnet-2025-21173
Updated
2026-11-02
OSVBIT-dotnet-sdk-2025-21173 No score

.NET Elevation of Privilege Vulnerability

.NET Elevation of Privilege Vulnerability

Record
BIT-dotnet-sdk-2025-21173
Updated
2026-11-02
OSVRLSA-2025:0381 No score

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.112 and .NET Runtime 8.0.1.12.

Security Fix(es):

  • dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  • dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  • dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

  • dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)

  • dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)

  • dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:0381
Updated
2026-11-02
OSVRLSA-2025:0382 No score

Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.102 and .NET Runtime 9.0.1.

Security Fix(es):

  • dotnet: .NET Remote Code Execution Vulnerability (CVE-2025-21171)
  • dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  • dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  • dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

  • dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)

  • dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)

  • dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)

  • dotnet: .NET Remote Code Execution Vulnerability (CVE-2025-21171)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:0382
Updated
2026-11-02
OSVUSN-7210-1 No score

dotnet8, dotnet9 vulnerabilities

It was discovered that .NET did not properly handle input provided to its Convert.TryToHexString method. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-21171)

It was discovered that .NET did not properly handle an integer overflow when processing certain specially crafted files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-21172)

Daniel Plaisted and Noah Gilson discovered that .NET insecurely handled temporary file usage which could result in malicious package dependency injection. An attacker could possibly use this issue to elevate privileges. (CVE-2025-21173)

It was discovered that .NET did not properly perform input data validation when processing certain specially crafted files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-21176)

Record
USN-7210-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dotnet8-runtime
Alpine:v3.20
 before 8.0.12-r0
8.0.12-r0
dotnet8-runtime
Alpine:v3.21
 before 8.0.12-r0
8.0.12-r0
dotnet8-runtime
Alpine:v3.22
 before 8.0.12-r0
8.0.12-r0
dotnet8-runtime
Alpine:v3.23
 before 8.0.12-r0
8.0.12-r0
dotnet8-runtime
Alpine:v3.24
 before 8.0.12-r0
8.0.12-r0
dotnet9-runtime
Alpine:v3.21
 before 9.0.1-r0
9.0.1-r0
dotnet9-runtime
Alpine:v3.22
 before 9.0.1-r0
9.0.1-r0
dotnet9-runtime
Alpine:v3.23
 before 9.0.1-r0
9.0.1-r0
dotnet9-runtime
Alpine:v3.24
 before 9.0.1-r0
9.0.1-r0
aspnetcore-runtime-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.12-1.el8_10
8.0.12-1.el8_10
Show 182 moreShow less
Affected packages
PackageAffectedFixed
aspnetcore-runtime-dbg-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.12-1.el8_10
8.0.12-1.el8_10
aspnetcore-targeting-pack-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.12-1.el8_10
8.0.12-1.el8_10
dotnet-apphost-pack-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.12-1.el8_10
8.0.12-1.el8_10
dotnet-hostfxr-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.12-1.el8_10
8.0.12-1.el8_10
dotnet-runtime-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.12-1.el8_10
8.0.12-1.el8_10
dotnet-runtime-dbg-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.12-1.el8_10
8.0.12-1.el8_10
dotnet-sdk-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.112-1.el8_10
8.0.112-1.el8_10
dotnet-sdk-8.0-source-built-artifacts
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.112-1.el8_10
8.0.112-1.el8_10
dotnet-sdk-dbg-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.112-1.el8_10
8.0.112-1.el8_10
dotnet-targeting-pack-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.12-1.el8_10
8.0.12-1.el8_10
dotnet-templates-8.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 8.0.112-1.el8_10
8.0.112-1.el8_10
aspnetcore-runtime-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.1-1.el8_10
9.0.1-1.el8_10
aspnetcore-runtime-dbg-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.1-1.el8_10
9.0.1-1.el8_10
aspnetcore-targeting-pack-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.1-1.el8_10
9.0.1-1.el8_10
dotnet
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.102-1.el8_10
9.0.102-1.el8_10
dotnet-apphost-pack-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.1-1.el8_10
9.0.1-1.el8_10
dotnet-host
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.1-1.el8_10
9.0.1-1.el8_10
dotnet-hostfxr-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.1-1.el8_10
9.0.1-1.el8_10
dotnet-runtime-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.1-1.el8_10
9.0.1-1.el8_10
dotnet-runtime-dbg-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.1-1.el8_10
9.0.1-1.el8_10
dotnet-sdk-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.102-1.el8_10
9.0.102-1.el8_10
dotnet-sdk-9.0-source-built-artifacts
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.102-1.el8_10
9.0.102-1.el8_10
dotnet-sdk-aot-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.102-1.el8_10
9.0.102-1.el8_10
dotnet-sdk-dbg-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.102-1.el8_10
9.0.102-1.el8_10
dotnet-targeting-pack-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.1-1.el8_10
9.0.1-1.el8_10
dotnet-templates-9.0
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.102-1.el8_10
9.0.102-1.el8_10
netstandard-targeting-pack-2.1
AlmaLinux:8
From an advisory covering 4 CVEs
 before 9.0.102-1.el8_10
9.0.102-1.el8_10
dotnet8-runtime
Alpaquita:stream
 8.0.11-r1 up to 8.0.12-r0
8.0.12-r0
dotnet
Bitnami
 8.0.0 up to 8.0.1, 9.0.0 up to 9.0.1
8.0.19.0.1
dotnet-sdk
Bitnami
 8.0.0 up to 8.0.101, 9.0.0 up to 9.0.100
8.0.1019.0.100
aspnetcore-runtime-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
aspnetcore-runtime-dbg-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
aspnetcore-targeting-pack-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-apphost-pack-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-apphost-pack-8.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-hostfxr-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-hostfxr-8.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-runtime-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-runtime-8.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-runtime-dbg-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-sdk-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
dotnet-sdk-8.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
dotnet-sdk-dbg-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
dotnet-targeting-pack-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-templates-8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
dotnet8.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
dotnet8.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
dotnet8.0-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
dotnet-apphost-pack-8.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-hostfxr-8.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-runtime-8.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el9_5
0:8.0.12-1.el9_5
dotnet-sdk-8.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
dotnet-sdk-8.0-source-built-artifacts
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
dotnet8.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
dotnet8.0-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el9_5
0:8.0.112-1.el9_5
aspnetcore-runtime-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
aspnetcore-runtime-dbg-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
aspnetcore-targeting-pack-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-apphost-pack-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-apphost-pack-9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-host
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-host-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-hostfxr-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-hostfxr-9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-runtime-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-runtime-9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-runtime-dbg-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-sdk-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet-sdk-9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet-sdk-aot-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet-sdk-aot-9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet-sdk-dbg-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet-targeting-pack-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-templates-9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet9.0
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet9.0-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet9.0-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
netstandard-targeting-pack-2.1
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet-apphost-pack-9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-host-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-hostfxr-9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-runtime-9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el9_5
0:9.0.1-1.el9_5
dotnet-sdk-9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet-sdk-9.0-source-built-artifacts
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet-sdk-aot-9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet9.0-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
dotnet9.0-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el9_5
0:9.0.102-1.el9_5
aspnetcore-runtime-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
aspnetcore-runtime-dbg-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
aspnetcore-targeting-pack-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-apphost-pack-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-apphost-pack-8.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-hostfxr-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-hostfxr-8.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-runtime-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-runtime-8.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-runtime-dbg-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-sdk-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet-sdk-8.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet-sdk-dbg-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet-targeting-pack-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-templates-8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet8.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet8.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet8.0-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet-apphost-pack-8.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-hostfxr-8.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-runtime-8.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:8.0.12-1.el8_10
0:8.0.12-1.el8_10
dotnet-sdk-8.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet-sdk-8.0-source-built-artifacts
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet8.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet8.0-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
aspnetcore-runtime-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
aspnetcore-runtime-dbg-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
aspnetcore-targeting-pack-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet-apphost-pack-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-apphost-pack-9.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-host
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-host-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-hostfxr-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-hostfxr-9.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-runtime-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-runtime-9.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-runtime-dbg-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-sdk-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet-sdk-9.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet-sdk-aot-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet-sdk-aot-9.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet-sdk-dbg-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet-targeting-pack-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-templates-9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet9.0
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet9.0-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet9.0-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
netstandard-targeting-pack-2.1
Red Hat:enterprise_linux:8::appstream
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet-apphost-pack-9.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-host-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-hostfxr-9.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-runtime-9.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:9.0.1-1.el8_10
0:9.0.1-1.el8_10
dotnet-sdk-9.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet-sdk-9.0-source-built-artifacts
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet-sdk-aot-9.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet9.0-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet9.0-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
aspnetcore-runtime-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
aspnetcore-runtime-dbg-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
aspnetcore-targeting-pack-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-apphost-pack-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-apphost-pack-8.0-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-host
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-host-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-hostfxr-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-hostfxr-8.0-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-runtime-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-runtime-8.0-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-runtime-dbg-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-sdk-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet-sdk-8.0-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet-sdk-dbg-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet-targeting-pack-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-templates-8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet8.0
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet8.0-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet8.0-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
netstandard-targeting-pack-2.1
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet-apphost-pack-8.0-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-host-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-hostfxr-8.0-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-runtime-8.0-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 0:8.0.12-1.el9_4
0:8.0.12-1.el9_4
dotnet-sdk-8.0-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet-sdk-8.0-source-built-artifacts
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet8.0-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet8.0-debugsource
Red Hat:rhel_eus:9.4::crb
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el9_4
0:8.0.112-1.el9_4
dotnet8.0
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:8.0.112-1.el8_10
0:8.0.112-1.el8_10
dotnet9.0
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:9.0.102-1.el8_10
0:9.0.102-1.el8_10
dotnet6
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.108-0ubuntu1~22.04.16.0.109-0ubuntu1~22.04.16.0.110-0ubuntu1~22.04.16.0.111-0ubuntu1~22.04.16.0.113-0ubuntu1~22.04.1
Show 16 moreShow less
6.0.116-0ubuntu1~22.04.16.0.118-0ubuntu1~22.04.16.0.119-0ubuntu1~22.04.16.0.120-0ubuntu1~22.04.16.0.121-0ubuntu1~22.04.16.0.122-0ubuntu1~22.04.16.0.123-0ubuntu1~22.04.16.0.124-0ubuntu1~22.04.16.0.125-0ubuntu1~22.04.16.0.126-0ubuntu1~22.04.16.0.127-0ubuntu1~22.04.16.0.128-0ubuntu1~22.04.26.0.132-0ubuntu1~22.04.16.0.133-0ubuntu1~22.04.16.0.135-0ubuntu1~22.04.16.0.136-0ubuntu1~22.04.1
 None known
dotnet7
Ubuntu:22.04:LTS
 All versions, plus listed versions
7.0.105-0ubuntu1~22.04.17.0.107-0ubuntu1~22.04.17.0.108-0ubuntu1~22.04.17.0.109-0ubuntu1~22.04.17.0.110-0ubuntu1~22.04.1
Show 9 moreShow less
7.0.111-0ubuntu1~22.04.17.0.112-0ubuntu1~22.04.17.0.113-0ubuntu1~22.04.17.0.114-0ubuntu1~22.04.17.0.115-0ubuntu1~22.04.17.0.116-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.27.0.119-0ubuntu1~22.04.1
 None known
dotnet8
Ubuntu:22.04:LTS
 before 8.0.112-8.0.12-0ubuntu1~22.04.1, plus listed versions
8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.28.0.105-8.0.5-0ubuntu1~22.04.18.0.107-8.0.7-0ubuntu1~22.04.18.0.108-8.0.8-0ubuntu1~22.04.18.0.110-8.0.10-0ubuntu1~22.04.18.0.111-8.0.11-0ubuntu1~22.04.1
8.0.112-8.0.12-0ubuntu1~22.04.1
dotnet8
Ubuntu:24.04:LTS
 before 8.0.112-8.0.12-0ubuntu1~24.04.1, plus listed versions
8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2
Show 12 moreShow less
8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu18.0.105-8.0.5-0ubuntu1~24.04.18.0.107-8.0.7-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.28.0.110-8.0.10-0ubuntu1~24.04.18.0.111-8.0.11-0ubuntu1~24.04.1
8.0.112-8.0.12-0ubuntu1~24.04.1
dotnet8
Ubuntu:22.04:LTS
From an advisory covering 4 CVEs
 before 8.0.112-8.0.12-0ubuntu1~22.04.1, plus listed versions
8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.28.0.105-8.0.5-0ubuntu1~22.04.18.0.107-8.0.7-0ubuntu1~22.04.18.0.108-8.0.8-0ubuntu1~22.04.18.0.110-8.0.10-0ubuntu1~22.04.18.0.111-8.0.11-0ubuntu1~22.04.1
8.0.112-8.0.12-0ubuntu1~22.04.1
dotnet8
Ubuntu:24.04:LTS
From an advisory covering 4 CVEs
 before 8.0.112-8.0.12-0ubuntu1~24.04.1, plus listed versions
8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2
Show 12 moreShow less
8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu18.0.105-8.0.5-0ubuntu1~24.04.18.0.107-8.0.7-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.18.0.108-8.0.8-0ubuntu1~24.04.28.0.110-8.0.10-0ubuntu1~24.04.18.0.111-8.0.11-0ubuntu1~24.04.1
8.0.112-8.0.12-0ubuntu1~24.04.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-21173 is a high vulnerability (CVSS 7.3) in Microsoft .net, published January 14, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.30%, the 70th percentile. Fixed in dotnet8-runtime 8.0.12-r0.

References

Show 51 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open