CVE-2025-21176: Microsoft .net

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Affected products

• Microsoft .net: version 8.0.0 only; version 9.0.0 only
• Microsoft .NET Framework: version 4.6 only; version 4.6.2 only; version 3.5 only; version 4.8.1 only; version 4.7 only; version 4.7.1 only; …
• Microsoft Visual Studio 2017: from 15.0, before 15.9.69 (fixed in 15.9.69)

Published 2025-01-14. Last modified 2026-06-17.