7.5
Élevée
CVE-2025-30399 Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network
Description
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PowerShell 7.4 7.4 | 7.4.0 → < 7.4.11 | 7.4.11 |
| PowerShell 7.5 7.5 | 7.5.0 → < 7.5.2 | 7.5.2 |
| .NET 8.0 8.0 | 8.0.0 → < 8.0.17 | 8.0.17 |
| .NET 9.0 9.0 | 9.0.0 → < 9.0.6 | 9.0.6 |
| Microsoft Visual Studio 2022 version 17.12 17.12 | 17.12.0 → < 17.12.9 | 17.12.9 |
| Microsoft Visual Studio 2022 version 17.8 17.8 | 17.8.0 → < 17.8.22 | 17.8.22 |
| Microsoft Visual Studio 2022 version 17.10 17.10 | 17.10.0 → < 17.10.16 | 17.10.16 |
| Microsoft Visual Studio 2022 version 17.14 17.14 | 17.14.0 → < 17.14.5 | 17.14.5 |
Références
- .NET and Visual Studio Remote Code Execution Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de PowerShell 7.4
Les 22 CVE de PowerShell 7.4 →
CVE-2026-96303
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a…
6.5
Moyenne
CVE-2026-96251
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute…
8.8
Élevée
CVE-2026-50523
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an…
7.8
Élevée
CVE-2026-70337
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network
8.8
Élevée