Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network.

Affected: NuGet: dotnet-sos, NuGet: dotnet-dump, NuGet: dotnet-debugger-extensions

# Microsoft Security Advisory CVE-2025-24043 | WinDbg Remote Code Execution Vulnerability

## <a name="executive-summary"></a>Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in [WinDbg](https://aka.ms/windbg/download). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

Improper verification of cryptographic signature in SOS allows an authorized attacker to execute code over a network resulting in Remote Code Execution.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/346

## <a name="mitigation-factors"></a>Mitigation factors

Microsoft has not identified any mitigating factors for this vulnerability.

## <a name="affected-packages"></a>Affected Packages The vulnerability affects any Microsoft .NET Core project if it uses any of affected packages versions listed below

### <a name="">WinDbg</a> WinDbg Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [dotnet-sos](https://www.nuget.org/packages/dotnet-sos) | < 9.0.607501 | 9.0.607501 [dotnet-dump](https://www.nuget.org/packages/dotnet-dump) | < 9.0.557512 | 9.0.607501 [dotnet-debugger-extensions](https://www.nuget.org/packages/dotnet-debugger-extensions) | 9.0.557512 | 9.0.607601

## Advisory FAQ

### <a name="how-affected"></a>How do I know if I am affected?

If you you are…

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft Visual Studio Code und Microsoft ASP.NET ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.