7.5
High
CVE-2025-21171 .NET Remote Code Execution Vulnerability
Description
.NET Remote Code Execution Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerShell 7.5 7.5 | earliest → < 7.5.0 | 7.5.0 |
| .NET 9.0 9.0 | 9.0.0 → < 9.0.1 | 9.0.1 |
| Microsoft Visual Studio 2022 version 17.12 17.12 | 17.12.0 → < 17.12.4 | 17.12.4 |
| Microsoft Visual Studio 2022 version 17.6 17.6 | 17.6.0 → < 17.6.22 | 17.6.22 |
| Microsoft Visual Studio 2022 version 17.8 17.8 | 17.8.0 → < 17.8.17 | 17.8.17 |
| Microsoft Visual Studio 2022 version 17.10 17.10 | 17.10.0 → < 17.10.10 | 17.10.10 |
References
- .NET Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of PowerShell 7.5
The 17 CVEs of PowerShell 7.5 →
CVE-2026-96303
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a…
6.5
Medium
CVE-2026-96251
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute…
8.8
High
CVE-2026-50523
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an…
7.8
High
CVE-2026-70337
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network
8.8
High