← CVE Intelligence

CVE-2025-21172

.NET and Visual Studio Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / .NET 8.0	affected 8.0.0 before 8.0.12
Microsoft / .NET 9.0	affected 9.0.0 before 9.0.1
Microsoft / Microsoft Visual Studio 2015 Update 3	affected 14.0.0 before 14.0.24252.2
Microsoft / Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	affected 15.9.0 before 15.9.69
Microsoft / Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	affected 16.11.0 before 16.11.43
Microsoft / Microsoft Visual Studio 2022 version 17.10	affected 17.10.0 before 17.10.10
Microsoft / Microsoft Visual Studio 2022 version 17.12	affected 17.12.0 before 17.12.4
Microsoft / Microsoft Visual Studio 2022 version 17.6	affected 17.6.0 before 17.6.22
Microsoft / Microsoft Visual Studio 2022 version 17.8	affected 17.8.0 before 17.8.17

CWE

CWE-190, CWE-122

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21172

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.herodevs.com/vulnerability-directory/cve-2025-21172