HIGH 7.3 Microsoft

CVE-2025-21173

.NET Elevation of Privilege Vulnerability

Microsoft Security Update 2025-Jan: .NET Elevation of Privilege Vulnerability

Affected Products

.NET 8.0 installed on Linux
.NET 9.0 installed on Linux
Microsoft Visual Studio 2022 version 17.12
Microsoft Visual Studio 2022 version 17.6
Microsoft Visual Studio 2022 version 17.8
Microsoft Visual Studio 2022 version 17.10

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21173
https://nvd.nist.gov/vuln/detail/CVE-2025-21173

Published: 2025-01-14 · Source: Microsoft · Feed updated: 2026-08-11

This high severity vulnerability with a CVSS score of 7.3 was published on 2025-01-14 via Microsoft. Affected: .NET 8.0 installed on Linux, .NET 9.0 installed on Linux, Microsoft Visual Studio 2022 version 17.12 and 3 more.

vulnfeed aggregates 10103 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.