{"id":"CVE-2025-30399","state":"PUBLISHED","title":".NET and Visual Studio Remote Code Execution Vulnerability","description":"Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.","publishedAt":"2025-06-13T01:08:00.208Z","updatedAt":"2026-02-20T16:00:32.339Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft .NET 8.0","Microsoft .NET 9.0","Microsoft Microsoft Visual Studio 2022 version 17.10","Microsoft Microsoft Visual Studio 2022 version 17.12","Microsoft Microsoft Visual Studio 2022 version 17.14","Microsoft Microsoft Visual Studio 2022 version 17.8","Microsoft PowerShell 7.4","Microsoft PowerShell 7.5"],"affected":[{"vendor":"Microsoft","product":".NET 8.0","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.0.17","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"version":"9.0.0","status":"affected","lessThan":"9.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.10","versions":[{"version":"17.10.0","status":"affected","lessThan":"17.10.16","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"version":"17.12.0","status":"affected","lessThan":"17.12.9","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"version":"17.14.0","status":"affected","lessThan":"17.14.5","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.8","versions":[{"version":"17.8.0","status":"affected","lessThan":"17.8.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"PowerShell 7.4","versions":[{"version":"7.4.0","status":"affected","lessThan":"7.4.11","versionType":"custom"}]},{"vendor":"Microsoft","product":"PowerShell 7.5","versions":[{"version":"7.5.0","status":"affected","lessThan":"7.5.2","versionType":"custom"}]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30399"],"weaknesses":["CWE-426"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/30xxx/CVE-2025-30399.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-30399","state":"PUBLISHED","datePublished":"2025-06-13T01:08:00.208Z","dateUpdated":"2026-02-20T16:00:32.339Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2025-03-21T19:09:29.816Z"},"containers":{"cna":{"title":".NET and Visual Studio Remote Code Execution Vulnerability","descriptions":[{"lang":"en-US","value":"Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network."}],"affected":[{"vendor":"Microsoft","product":".NET 8.0","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.0.17","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"version":"9.0.0","status":"affected","lessThan":"9.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.10","versions":[{"version":"17.10.0","status":"affected","lessThan":"17.10.16","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"version":"17.12.0","status":"affected","lessThan":"17.12.9","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"version":"17.14.0","status":"affected","lessThan":"17.14.5","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.8","versions":[{"version":"17.8.0","status":"affected","lessThan":"17.8.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"PowerShell 7.4","versions":[{"version":"7.4.0","status":"affected","lessThan":"7.4.11","versionType":"custom"}]},{"vendor":"Microsoft","product":"PowerShell 7.5","versions":[{"version":"7.5.0","status":"affected","lessThan":"7.5.2","versionType":"custom"}]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30399","name":".NET and Visual Studio Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":7.5,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-426","description":"CWE-426: Untrusted Search Path","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-02-20T16:00:32.339Z"},"datePublic":"2025-06-10T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.11"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*","versionStartIncluding":"7.5.0","versionEndExcluding":"7.5.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.17"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.0.6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.12.0","versionEndExcluding":"17.12.9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.8.0","versionEndExcluding":"17.8.22"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.10.0","versionEndExcluding":"17.10.16"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.14.0","versionEndExcluding":"17.14.5"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-13T15:46:01.058158Z","id":"CVE-2025-30399","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-13T15:46:09.476Z"}}]}}}