Search for vulnerabilities
Vulnerability details: VCID-2zyc-443q-9qf5
Vulnerability ID VCID-2zyc-443q-9qf5
Aliases CVE-2025-21171
GHSA-p54p-p3qm-8vgj
Summary dotnet: .NET Remote Code Execution Vulnerability
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-122 Heap-based Buffer Overflow
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 7.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-21171.json
epss 0.00091 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.0014 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00141 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00156 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00156 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00159 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.00735 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
epss 0.03343 https://api.first.org/data/v1/epss?cve=CVE-2025-21171
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-p54p-p3qm-8vgj
cvssv3.1 8.1 https://github.com/dotnet/runtime
generic_textual HIGH https://github.com/dotnet/runtime
cvssv3.1 8.1 https://github.com/dotnet/runtime/security/advisories/GHSA-p54p-p3qm-8vgj
cvssv3.1_qr HIGH https://github.com/dotnet/runtime/security/advisories/GHSA-p54p-p3qm-8vgj
generic_textual HIGH https://github.com/dotnet/runtime/security/advisories/GHSA-p54p-p3qm-8vgj
cvssv3.1 7.5 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21171
cvssv3.1 8.1 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21171
generic_textual HIGH https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21171
ssvc Track https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21171
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2025-21171
cvssv3.1 8.1 https://nvd.nist.gov/vuln/detail/CVE-2025-21171
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2025-21171
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-21171.json
https://api.first.org/data/v1/epss?cve=CVE-2025-21171
https://github.com/dotnet/runtime
https://github.com/dotnet/runtime/security/advisories/GHSA-p54p-p3qm-8vgj
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21171
https://nvd.nist.gov/vuln/detail/CVE-2025-21171
2337958 https://bugzilla.redhat.com/show_bug.cgi?id=2337958
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
GHSA-p54p-p3qm-8vgj https://github.com/advisories/GHSA-p54p-p3qm-8vgj
RHSA-2025:0382 https://access.redhat.com/errata/RHSA-2025:0382
USN-7210-1 https://usn.ubuntu.com/7210-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-21171.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/dotnet/runtime
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/dotnet/runtime/security/advisories/GHSA-p54p-p3qm-8vgj
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21171
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21171
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-15T21:24:02Z/ Found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21171
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2025-21171
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2025-21171
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.40508
EPSS Score 0.00091
Published At Jan. 16, 2025, midnight
Date Actor Action Source VulnerableCode Version
2025-01-16T14:22:50.479152+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-21171.json 35.1.0