CVE-2025-55247
.NET Elevation of Privilege Vulnerability
Summary
.NET Elevation of Privilege Vulnerability
Original description
The description as published by the source.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
dotnet-sdk
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.21"},{"introduced":"9.0.0"},{"fixed":"9.0.10"}]}]
Bitnami
dotnet
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.21"},{"introduced":"9.0.0"},{"fixed":"9.0.10"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2025-55247 dotnet6
References
- advisory msrc.microsoft.com
- web nvd.nist.gov