← CVE Intelligence

CVE-2025-36854

EOL ASP.NET 6.0 Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / productVersions
Microsoft / .NET 6.0affected 6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.Identityaffected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.win-armaffected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.win-arm64affected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.win-x64affected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.win-x86affected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.linux-armaffected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.linux-arm64affected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.linux-musl-armaffected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.linux-musl-arm64affected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.linux-musl-x64affected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.linux-x64affected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.osx-arm64affected >=6.0.0 through 6.0.36
Microsoft / Microsoft.AspNetCore.App.Runtime.osx-x64affected >=6.0.0 through 6.0.36

CWE

CWE-416

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.