INFSA-2025:8814: .NET 8.0 security update
Information about definition
Identificator: INFSA-2025:8814
Type: security
Release date: 2025-07-15 19:39:12 UTC
Information about package
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.117 and .NET Runtime 8.0.17.
Vulnerabilities description
- CVE-2025-30399
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
Severity level
CVE | Score CVSS 2.0 | Score CVSS 3.x | Score CVSS 4.0 |
---|---|---|---|
NIST — CVE-2025-30399
|
no information | 7.5 | no information |
Updated packages