en Se connecter

7.3 Élevée

CVE-2025-55247 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate…

Description

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
.NET 8.0 8.0	8.0.0 → < 8.0.21	8.0.21
.NET 9.0 9.0	9.0.0 → < 9.0.10	9.0.10

Références

.NET Elevation of Privilege Vulnerability msrc.microsoft.com

Chronologie

Publiée 14 octobre 2025
Dernière modification 22 février 2026

Les 94 CVE de .NET 8.0 →

CVE-2026-105016 Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network 9.8 Critique CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network 7.5 Élevée CVE-2026-96233 Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network 7.5 Élevée CVE-2026-96229 Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network 6.5 Moyenne

Suivre cette CVE