fr Sign in

7.3 High

CVE-2025-55247 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate…

Description

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Affected products and versions

Product	Affected versions	Fixed in
.NET 8.0 8.0	8.0.0 → < 8.0.21	8.0.21
.NET 9.0 9.0	9.0.0 → < 9.0.10	9.0.10

References

.NET Elevation of Privilege Vulnerability msrc.microsoft.com

Timeline

Published October 14, 2025
Last modified February 22, 2026

The 94 CVEs of .NET 8.0 →

CVE-2026-105016 Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network 9.8 Critical CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network 7.5 High CVE-2026-96233 Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network 7.5 High CVE-2026-96229 Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network 6.5 Medium

Track this CVE