vulnerability

Oracle Linux: CVE-2025-24070: ELSA-2025-2667: .NET 9.0 security, bug fix, and enhancement update (IMPORTANT) (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:S/C:C/I:C/A:C)

Published

Mar 11, 2025

Added

Mar 13, 2025

Modified

Dec 3, 2025

Description

A flaw was found in the SignInManager.RefreshSignInAsync method. This flaw allows an attacker with local access and low privileges to escalate privileges. The issue might lead to unauthorized access or manipulation of authentication sessions.

Solutions

oracle-linux-upgrade-aspnetcore-runtime-8-0oracle-linux-upgrade-aspnetcore-runtime-9-0oracle-linux-upgrade-aspnetcore-runtime-dbg-8-0oracle-linux-upgrade-aspnetcore-runtime-dbg-9-0oracle-linux-upgrade-aspnetcore-targeting-pack-8-0oracle-linux-upgrade-aspnetcore-targeting-pack-9-0oracle-linux-upgrade-dotnetoracle-linux-upgrade-dotnet-apphost-pack-8-0oracle-linux-upgrade-dotnet-apphost-pack-9-0oracle-linux-upgrade-dotnet-hostoracle-linux-upgrade-dotnet-hostfxr-8-0oracle-linux-upgrade-dotnet-hostfxr-9-0oracle-linux-upgrade-dotnet-runtime-8-0oracle-linux-upgrade-dotnet-runtime-9-0oracle-linux-upgrade-dotnet-runtime-dbg-8-0oracle-linux-upgrade-dotnet-runtime-dbg-9-0oracle-linux-upgrade-dotnet-sdk-8-0oracle-linux-upgrade-dotnet-sdk-8-0-source-built-artifactsoracle-linux-upgrade-dotnet-sdk-9-0oracle-linux-upgrade-dotnet-sdk-9-0-source-built-artifactsoracle-linux-upgrade-dotnet-sdk-aot-9-0oracle-linux-upgrade-dotnet-sdk-dbg-8-0oracle-linux-upgrade-dotnet-sdk-dbg-9-0oracle-linux-upgrade-dotnet-targeting-pack-8-0oracle-linux-upgrade-dotnet-targeting-pack-9-0oracle-linux-upgrade-dotnet-templates-8-0oracle-linux-upgrade-dotnet-templates-9-0oracle-linux-upgrade-netstandard-targeting-pack-2-1

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report