CVE-2025-21173

Description

.NET Elevation of Privilege Vulnerability

CVSS Metrics

• v3.1•HIGH•Score: 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
• v3.1•HIGH•Score: 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 2.00%• Percentile: 84%

Techniques & Countermeasures

• CWE-379•Creation of Temporary File in Directory with Insecure Permissions

  The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.

Affected Systems

• microsoft•microsoft visual studio 2022 version 17.10

  ≥ 17.10, < 17.10.10 | ≥ 17.10.0, < 17.10.10

• microsoft•microsoft visual studio 2022 version 17.12

  ≥ 17.0, < 17.12.4 | ≥ 17.12.0, < 17.12.4

• microsoft•microsoft visual studio 2022 version 17.6

  ≥ 17.6.0, < 17.6.22

• microsoft•microsoft visual studio 2022 version 17.8

  ≥ 17.8.0, < 17.8.17

• microsoft•.net

  8.0.0 | 9.0.0

• microsoft•.net 8.0

  ≥ 8.0.0, < 8.0.12

• microsoft•.net 9.0

  ≥ 9.0.0, < 9.0.1

• microsoft•visual_studio_2022

  ≥ 17.6.0, < 17.6.22 | ≥ 17.8.0, < 17.8.17 | ≥ 17.10.0, < 17.10.10 | ≥ 17.12.0, < 17.12.4

References (2)

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21173
• https://www.herodevs.com/vulnerability-directory/cve-2025-21173