CVE-2025-21172

Published: Jan 14, 2025
Updated: Jun 30, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-21172" target="_blank" rel="noopener"> CVE-2025-21172
GHSA: <a href="https://github.com/advisories/GHSA-jjcv-wr2g-4rv4" target="_blank" rel="noopener"> GHSA-jjcv-wr2g-4rv4
Severity: High
Exploit:

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS v3:

CWEs:

Software	From	Fixed in
Microsoft.NETCore.App.Runtime.linux-arm	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.linux-arm64	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.linux-musl-arm	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.linux-musl-arm64	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.linux-musl-x64	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.linux-x64	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.osx-arm64	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.osx-x64	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.win-arm	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.win-arm64	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.win-x64	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.win-x86	9.0.0	9.0.1
Microsoft.NETCore.App.Runtime.win-x64	8.0.0	8.0.12
Microsoft.NETCore.App.Runtime.win-arm64	8.0.0	8.0.12
Microsoft.NETCore.App.Runtime.win-arm	8.0.0	8.0.12
Microsoft.NETCore.App.Runtime.osx-x64	8.0.0	8.0.12
Microsoft.NETCore.App.Runtime.osx-arm64	8.0.0	8.0.12
Microsoft.NETCore.App.Runtime.linux-x64	8.0.0	8.0.12
Microsoft.NETCore.App.Runtime.linux-musl-x64	8.0.0	8.0.12
Microsoft.NETCore.App.Runtime.linux-musl-arm64	8.0.0	8.0.12
Microsoft.NETCore.App.Runtime.linux-musl-arm	8.0.0	8.0.12
Microsoft.NETCore.App.Runtime.linux-arm64	8.0.0	8.0.12
Microsoft.NETCore.App.Runtime.linux-arm	8.0.0	8.0.12
microsoft / .net	8.0.0	8.0.0.x
microsoft / .net	9.0.0	9.0.0.x
microsoft / visual_studio_2017	15.0	15.8.x
microsoft / visual_studio_2019	16.0	16.10.x
microsoft / visual_studio_2022	17.12.0	17.12.4
microsoft / visual_studio_2022	17.10.0	17.10.10
microsoft / visual_studio_2022	17.6.0	17.6.22
microsoft / visual_studio_2022	17.8.0	17.8.17