<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-02T17:26:19.413366+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/alsa-2025:0381</id>
    <title>ALSA-2025:0381 — Important: .NET 8.0 security update</title>
    <updated>2026-10-02T17:26:19.428206+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> AlmaLinux:8: aspnetcore-runtime-8.0, AlmaLinux:8: aspnetcore-runtime-dbg-8.0, AlmaLinux:8: aspnetcore-targeting-pack-8.0, AlmaLinux:8: dotnet-apphost-pack-8.0, AlmaLinux:8: dotnet-hostfxr-8.0, AlmaLinux:8: dotnet-runtime-8.0, AlmaLinux:8: dotnet-runtime-dbg-8.0, AlmaLinux:8: dotnet-sdk-8.0, AlmaLinux:8: dotnet-sdk-8.0-source-built-artifacts, AlmaLinux:8: dotnet-sdk-dbg-8.0 and 2 more</p>
<p>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.</p>
<p>New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.112 and .NET Runtime 8.0.1.12.</p>
<p>Security Fix(es):</p>
<p>* dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)</p>
<p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):</p>
<p>* dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)</p>
<p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/alsa-2025:0381"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2025-00356</id>
    <title>bdu:2025-00356</title>
    <updated>2026-10-02T17:26:19.428285+00:00</updated>
    <content>bdu:2025-00356</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2025-00356"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2025-21173</id>
    <title>BELL-CVE-2025-21173</title>
    <updated>2026-10-02T17:26:19.428302+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p><strong>Affected:</strong> Alpaquita:stream: dotnet8-runtime</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2025-21173"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bit-dotnet-2025-21173</id>
    <title>BIT-dotnet-2025-21173 — .NET Elevation of Privilege Vulnerability</title>
    <updated>2026-10-02T17:26:19.428320+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Bitnami: dotnet</p>
<p>.NET Elevation of Privilege Vulnerability</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bit-dotnet-2025-21173"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2025-avi-0040</id>
    <title>certfr-2025-avi-0040 — De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Elles permettent à un attaquant de provoquer une e…</title>
    <updated>2026-10-02T17:26:19.428339+00:00</updated>
    <content>certfr-2025-avi-0040</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2025-avi-0040"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-326076</id>
    <title>EUVD-2026-326076</title>
    <updated>2026-10-02T17:26:19.428355+00:00</updated>
    <content>EUVD-2026-326076</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-326076"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2025-21173</id>
    <title>fkie_cve-2025-21173</title>
    <updated>2026-10-02T17:26:19.428366+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>.NET Elevation of Privilege Vulnerability</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2025-21173"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-mvph-h5j7-4h2g</id>
    <title>GHSA-mvph-h5j7-4h2g</title>
    <updated>2026-10-02T17:26:19.428386+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>.NET Elevation of Privilege Vulnerability</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-mvph-h5j7-4h2g"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2025-21173</id>
    <title>msrc_CVE-2025-21173 — .NET Elevation of Privilege Vulnerability</title>
    <updated>2026-10-02T17:26:19.428399+00:00</updated>
    <content>msrc_CVE-2025-21173</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2025-21173"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhba-2025:0304</id>
    <title>RHBA-2025:0304 — Red Hat Bug Fix Advisory: .NET 8.0 bug fix and enhancement update</title>
    <updated>2026-10-02T17:26:19.428414+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript dotnet: .NET and Visual Studio Remote Code Execution Vulnerability dotnet: .NET Elevation of Privilege Vulnerability dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhba-2025:0304"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2025:0532</id>
    <title>RHSA-2025:0532 — Red Hat Security Advisory: .NET 8.0 security update</title>
    <updated>2026-10-02T17:26:19.428434+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>dotnet: .NET and Visual Studio Remote Code Execution Vulnerability dotnet: .NET Elevation of Privilege Vulnerability dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2025:0532"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-21173</id>
    <title>UBUNTU-CVE-2025-21173</title>
    <updated>2026-10-02T17:26:19.428451+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7, Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet8</p>
<p>.NET Elevation of Privilege Vulnerability</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-21173"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0093</id>
    <title>WID-SEC-W-2025-0093 — Microsoft Developer Tools: Mehrere Schwachstellen</title>
    <updated>2026-10-02T17:26:19.428471+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio 2017, Microsoft .NET Framework, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Visual Studio 2019, Microsoft Visual Studio 2022 und Microsoft Windows ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0093"/>
  </entry>
</feed>
