CVE-2025-21176

CVE-2025-21176 is a remote code execution vulnerability affecting .NET, .NET Framework, and Visual Studio. Published on January 14, 2025, it carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and is associated with CWE-126 (Buffer Over-read), though additional CWE details are unavailable from NVD.

An unauthenticated attacker on the network can exploit this vulnerability with low complexity by tricking a user into performing an action, such as interacting with a malicious file or link. Successful exploitation enables remote code execution on the target system, resulting in high impacts to confidentiality, integrity, and availability.

For mitigation details, refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21176 and the HeroDevs vulnerability directory at https://www.herodevs.com/vulnerability-directory/cve-2025-21176.