Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-aspnetcore-runtime-8.0alma-upgrade-aspnetcore-runtime-9.0alma-upgrade-aspnetcore-runtime-dbg-8.0alma-upgrade-aspnetcore-runtime-dbg-9.0alma-upgrade-aspnetcore-targeting-pack-8.0alma-upgrade-aspnetcore-targeting-pack-9.0alma-upgrade-dotnetalma-upgrade-dotnet-apphost-pack-8.0alma-upgrade-dotnet-apphost-pack-9.0alma-upgrade-dotnet-hostalma-upgrade-dotnet-hostfxr-8.0alma-upgrade-dotnet-hostfxr-9.0alma-upgrade-dotnet-runtime-8.0alma-upgrade-dotnet-runtime-9.0alma-upgrade-dotnet-runtime-dbg-8.0alma-upgrade-dotnet-runtime-dbg-9.0alma-upgrade-dotnet-sdk-8.0alma-upgrade-dotnet-sdk-8.0-source-built-artifactsalma-upgrade-dotnet-sdk-9.0alma-upgrade-dotnet-sdk-9.0-source-built-artifactsalma-upgrade-dotnet-sdk-aot-9.0alma-upgrade-dotnet-sdk-dbg-8.0alma-upgrade-dotnet-sdk-dbg-9.0alma-upgrade-dotnet-targeting-pack-8.0alma-upgrade-dotnet-targeting-pack-9.0alma-upgrade-dotnet-templates-8.0alma-upgrade-dotnet-templates-9.0alma-upgrade-netstandard-targeting-pack-2.1 | Jun 13, 2025 | Jun 11, 2025 | |
| Alpine Linux | alpine-linux-upgrade-dotnet8-runtimealpine-linux-upgrade-dotnet9-runtime | Aug 8, 2025 | Jun 13, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-aspnetcore-runtime-8-0amazon-linux-2023-upgrade-aspnetcore-runtime-dbg-8-0amazon-linux-2023-upgrade-aspnetcore-targeting-pack-8-0amazon-linux-2023-upgrade-dotnetamazon-linux-2023-upgrade-dotnet8-0-debuginfoamazon-linux-2023-upgrade-dotnet8-0-debugsourceamazon-linux-2023-upgrade-dotnet-apphost-pack-8-0amazon-linux-2023-upgrade-dotnet-apphost-pack-8-0-debuginfoamazon-linux-2023-upgrade-dotnet-hostamazon-linux-2023-upgrade-dotnet-host-debuginfoamazon-linux-2023-upgrade-dotnet-hostfxr-8-0amazon-linux-2023-upgrade-dotnet-hostfxr-8-0-debuginfoamazon-linux-2023-upgrade-dotnet-runtime-8-0amazon-linux-2023-upgrade-dotnet-runtime-8-0-debuginfoamazon-linux-2023-upgrade-dotnet-runtime-dbg-8-0amazon-linux-2023-upgrade-dotnet-sdk-8-0amazon-linux-2023-upgrade-dotnet-sdk-8-0-debuginfoamazon-linux-2023-upgrade-dotnet-sdk-8-0-source-built-artifactsamazon-linux-2023-upgrade-dotnet-sdk-dbg-8-0amazon-linux-2023-upgrade-dotnet-targeting-pack-8-0amazon-linux-2023-upgrade-dotnet-templates-8-0amazon-linux-2023-upgrade-netstandard-targeting-pack-2-1 | Jul 11, 2025 | Jun 10, 2025 | |
| Microsoft Visual_studio | microsoft-visual_studio_2022-upgrade-latest-ltsc_17_8microsoft-visual_studio_2022-upgrade-latest-ltsc_17_10microsoft-visual_studio_2022-upgrade-latest-ltsc_17_12microsoft-visual_studio_2022-upgrade-latest-current_channel | Jun 25, 2025 | Jun 10, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-aspnetcore-runtime-8-0oracle-linux-upgrade-aspnetcore-runtime-9-0oracle-linux-upgrade-aspnetcore-runtime-dbg-8-0oracle-linux-upgrade-aspnetcore-runtime-dbg-9-0oracle-linux-upgrade-aspnetcore-targeting-pack-8-0oracle-linux-upgrade-aspnetcore-targeting-pack-9-0oracle-linux-upgrade-dotnetoracle-linux-upgrade-dotnet-apphost-pack-8-0oracle-linux-upgrade-dotnet-apphost-pack-9-0oracle-linux-upgrade-dotnet-hostoracle-linux-upgrade-dotnet-hostfxr-8-0oracle-linux-upgrade-dotnet-hostfxr-9-0oracle-linux-upgrade-dotnet-runtime-8-0oracle-linux-upgrade-dotnet-runtime-9-0oracle-linux-upgrade-dotnet-runtime-dbg-8-0oracle-linux-upgrade-dotnet-runtime-dbg-9-0oracle-linux-upgrade-dotnet-sdk-8-0oracle-linux-upgrade-dotnet-sdk-8-0-source-built-artifactsoracle-linux-upgrade-dotnet-sdk-9-0oracle-linux-upgrade-dotnet-sdk-9-0-source-built-artifactsoracle-linux-upgrade-dotnet-sdk-aot-9-0oracle-linux-upgrade-dotnet-sdk-dbg-8-0oracle-linux-upgrade-dotnet-sdk-dbg-9-0oracle-linux-upgrade-dotnet-targeting-pack-8-0oracle-linux-upgrade-dotnet-targeting-pack-9-0oracle-linux-upgrade-dotnet-templates-8-0oracle-linux-upgrade-dotnet-templates-9-0oracle-linux-upgrade-netstandard-targeting-pack-2-1 | Jun 30, 2025 | Jun 10, 2025 |
| Redhat_linux | redhat-upgrade-aspnetcore-runtime-8-0redhat-upgrade-aspnetcore-runtime-9-0redhat-upgrade-aspnetcore-runtime-dbg-8-0redhat-upgrade-aspnetcore-runtime-dbg-9-0redhat-upgrade-aspnetcore-targeting-pack-8-0redhat-upgrade-aspnetcore-targeting-pack-9-0redhat-upgrade-dotnetredhat-upgrade-dotnet-apphost-pack-8-0redhat-upgrade-dotnet-apphost-pack-8-0-debuginforedhat-upgrade-dotnet-apphost-pack-9-0redhat-upgrade-dotnet-apphost-pack-9-0-debuginforedhat-upgrade-dotnet-hostredhat-upgrade-dotnet-host-debuginforedhat-upgrade-dotnet-hostfxr-8-0redhat-upgrade-dotnet-hostfxr-8-0-debuginforedhat-upgrade-dotnet-hostfxr-9-0redhat-upgrade-dotnet-hostfxr-9-0-debuginforedhat-upgrade-dotnet-runtime-8-0redhat-upgrade-dotnet-runtime-8-0-debuginforedhat-upgrade-dotnet-runtime-9-0redhat-upgrade-dotnet-runtime-9-0-debuginforedhat-upgrade-dotnet-runtime-dbg-8-0redhat-upgrade-dotnet-runtime-dbg-9-0redhat-upgrade-dotnet-sdk-8-0redhat-upgrade-dotnet-sdk-8-0-debuginforedhat-upgrade-dotnet-sdk-8-0-source-built-artifactsredhat-upgrade-dotnet-sdk-9-0redhat-upgrade-dotnet-sdk-9-0-debuginforedhat-upgrade-dotnet-sdk-9-0-source-built-artifactsredhat-upgrade-dotnet-sdk-aot-9-0redhat-upgrade-dotnet-sdk-aot-9-0-debuginforedhat-upgrade-dotnet-sdk-dbg-8-0redhat-upgrade-dotnet-sdk-dbg-9-0redhat-upgrade-dotnet-targeting-pack-8-0redhat-upgrade-dotnet-targeting-pack-9-0redhat-upgrade-dotnet-templates-8-0redhat-upgrade-dotnet-templates-9-0redhat-upgrade-dotnet8-0-debuginforedhat-upgrade-dotnet8-0-debugsourceredhat-upgrade-dotnet9-0-debuginforedhat-upgrade-dotnet9-0-debugsourceredhat-upgrade-netstandard-targeting-pack-2-1 | Jun 12, 2025 | Jun 10, 2025 | |
| Rocky_linux | rocky-upgrade-aspnetcore-runtime-8.0rocky-upgrade-aspnetcore-runtime-9.0rocky-upgrade-aspnetcore-runtime-dbg-8.0rocky-upgrade-aspnetcore-runtime-dbg-9.0rocky-upgrade-aspnetcore-targeting-pack-8.0rocky-upgrade-aspnetcore-targeting-pack-9.0rocky-upgrade-dotnetrocky-upgrade-dotnet-apphost-pack-8.0rocky-upgrade-dotnet-apphost-pack-8.0-debuginforocky-upgrade-dotnet-apphost-pack-9.0rocky-upgrade-dotnet-apphost-pack-9.0-debuginforocky-upgrade-dotnet-hostrocky-upgrade-dotnet-host-debuginforocky-upgrade-dotnet-hostfxr-8.0rocky-upgrade-dotnet-hostfxr-8.0-debuginforocky-upgrade-dotnet-hostfxr-9.0rocky-upgrade-dotnet-hostfxr-9.0-debuginforocky-upgrade-dotnet-runtime-8.0rocky-upgrade-dotnet-runtime-8.0-debuginforocky-upgrade-dotnet-runtime-9.0rocky-upgrade-dotnet-runtime-9.0-debuginforocky-upgrade-dotnet-runtime-dbg-8.0rocky-upgrade-dotnet-runtime-dbg-9.0rocky-upgrade-dotnet-sdk-8.0rocky-upgrade-dotnet-sdk-8.0-debuginforocky-upgrade-dotnet-sdk-8.0-source-built-artifactsrocky-upgrade-dotnet-sdk-9.0rocky-upgrade-dotnet-sdk-9.0-debuginforocky-upgrade-dotnet-sdk-9.0-source-built-artifactsrocky-upgrade-dotnet-sdk-aot-9.0rocky-upgrade-dotnet-sdk-aot-9.0-debuginforocky-upgrade-dotnet-sdk-dbg-8.0rocky-upgrade-dotnet-sdk-dbg-9.0rocky-upgrade-dotnet-targeting-pack-8.0rocky-upgrade-dotnet-targeting-pack-9.0rocky-upgrade-dotnet-templates-8.0rocky-upgrade-dotnet-templates-9.0rocky-upgrade-dotnet8.0-debuginforocky-upgrade-dotnet8.0-debugsourcerocky-upgrade-dotnet9.0-debuginforocky-upgrade-dotnet9.0-debugsourcerocky-upgrade-netstandard-targeting-pack-2.1 | Jul 31, 2025 | Jul 29, 2025 | |
| Ubuntu | ubuntu-upgrade-aspnetcore-runtime-8-0ubuntu-upgrade-aspnetcore-runtime-9-0ubuntu-upgrade-dotnet-host-8-0ubuntu-upgrade-dotnet-host-9-0ubuntu-upgrade-dotnet-hostfxr-8-0ubuntu-upgrade-dotnet-hostfxr-9-0ubuntu-upgrade-dotnet-runtime-8-0ubuntu-upgrade-dotnet-runtime-9-0ubuntu-upgrade-dotnet-sdk-8-0ubuntu-upgrade-dotnet-sdk-9-0ubuntu-upgrade-dotnet8ubuntu-upgrade-dotnet9 | Jun 12, 2025 | Jun 10, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Sep 2, 2025 | Jun 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub