.NET and Visual Studio Remote Code Execution Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products12

• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Microsoft Visual Studio 2022 version 17.10
• Microsoft Visual Studio 2022 version 17.12
• Microsoft Visual Studio 2022 version 17.14
• Microsoft Visual Studio 2022 version 17.8
• PowerShell 7.4
• PowerShell 7.5

✅ Remediation

KBRelease Notes — fixed build 7.4.11 KBRelease Notes (Security Update) — fixed build 7.5.2 KB5061935 (Security Update) — fixed build 8.0.17 KB5061936 (Security Update) — fixed build 9.0.6 KBRelease Notes (Security Update) — fixed build 17.12.9 KBRelease Notes (Security Update) — fixed build 17.8.22 KBRelease Notes (Security Update) — fixed build 17.10.16 KBRelease Notes (Security Update) — fixed build 17.14.5

🔗 References (11)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30399
• patchhttps://github.com/PowerShell/Announcements/issues/77
• patchhttps://dotnet.microsoft.com/en-us/download/dotnet/8.0
• referencehttps://support.microsoft.com/help/5061935
• patchhttps://dotnet.microsoft.com/en-us/download/dotnet/9.0
• referencehttps://support.microsoft.com/help/5061936
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12
• referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.8
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.10
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14