CVE-2025-24070 — ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Description

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	ASP.NET Core 8.0	8.0 – < 8.0.14	8.0.14
Microsoft	ASP.NET Core 9.0	9.0 – < 9.0.3	9.0.3
Microsoft	Microsoft Visual Studio 2022 version 17.10	17.10.0 – < 17.10.12	17.10.12
Microsoft	Microsoft Visual Studio 2022 version 17.12	17.12.0 – < 17.12.6	17.12.6
Microsoft	Microsoft Visual Studio 2022 version 17.13	17.13.0 – < 17.13.3	17.13.3
Microsoft	Microsoft Visual Studio 2022 version 17.8	17.8.0 – < 17.8.19	17.8.19

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 24.04 LTS	dotnet8	8.0.114-8.0.14-0ubuntu1~24.04.1	USN-7345-1
Ubuntu 22.04 LTS	dotnet6 +1	No fix yet	—
Ubuntu 22.04 LTS	dotnet8	8.0.114-8.0.14-0ubuntu1~22.04.1	USN-7345-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 9	dotnet-host +8	9.0.3-1.el9_5	RHSA-2025:2668
RHEL 9	dotnet-hostfxr-8.0 +7	8.0.14-1.el9_5	RHSA-2025:2669
RHEL 9	dotnet8.0 +4	8.0.114-1.el9_5	RHSA-2025:2669
RHEL 9	dotnet9.0 +6	9.0.104-1.el9_5	RHSA-2025:2668
RHEL 8	dotnet +7	9.0.104-1.el8_10	RHSA-2025:2667
RHEL 8	dotnet-host +8	9.0.3-1.el8_10	RHSA-2025:2667
RHEL 8	dotnet-hostfxr-8.0 +7	8.0.14-1.el8_10	RHSA-2025:2670
RHEL 8	dotnet8.0 +4	8.0.114-1.el8_10	RHSA-2025:2670

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
RHEL 9.4 EUS	dotnet-host +8	8.0.14-1.el9_4	RHSA-2025:2666
RHEL 9.4 EUS	dotnet8.0 +5	8.0.114-1.el9_4	RHSA-2025:2666

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 9	dotnet-host +8	9.0.3-1.el9_5	ALSA-2025:2668
AlmaLinux 9	dotnet-hostfxr-8.0 +7	8.0.14-1.el9_5	ALSA-2025:2669
AlmaLinux 9	dotnet-sdk-8.0 +3	8.0.114-1.el9_5	ALSA-2025:2669
AlmaLinux 9	dotnet-sdk-9.0 +5	9.0.104-1.el9_5	ALSA-2025:2668
AlmaLinux 8	dotnet +6	9.0.104-1.el8_10	ALSA-2025:2667
AlmaLinux 8	dotnet-host +8	9.0.3-1.el8_10	ALSA-2025:2667
AlmaLinux 8	dotnet-hostfxr-8.0 +7	8.0.14-1.el8_10	ALSA-2025:2670
AlmaLinux 8	dotnet-sdk-8.0 +3	8.0.114-1.el8_10	ALSA-2025:2670

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 8	dotnet8.0	8.0.114-1.el8_10	RLSA-2025:2670
Rocky Linux 8	dotnet9.0	9.0.104-1.el8_10	RLSA-2025:2667

Alpine

Security tracker ↗

Release	Package	Fixed in	Advisory
Alpine v3.24	dotnet8-runtime	8.0.14-r0	—
Alpine v3.24	dotnet9-runtime	9.0.3-r0	—
Alpine v3.23	dotnet8-runtime	8.0.14-r0	—
Alpine v3.23	dotnet9-runtime	9.0.3-r0	—
Alpine v3.22	dotnet8-runtime	8.0.14-r0	—
Alpine v3.22	dotnet9-runtime	9.0.3-r0	—
Alpine v3.21	dotnet8-runtime	8.0.14-r0	—
Alpine v3.21	dotnet9-runtime	9.0.3-r0	—
Alpine v3.20	dotnet8-runtime	8.0.14-r0	—

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2023	dotnet +5	8.0.114-1.amzn2023.0.1	ALAS2023-2025-912
Amazon Linux 2023	dotnet-host +8	8.0.14-1.amzn2023.0.1	ALAS2023-2025-912

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 9	dotnet-host +8	9.0.3-1.0.1.el9_5	ELSA-2025-2668
Oracle Linux 9	dotnet-hostfxr-8.0 +7	8.0.14-1.0.1.el9_5	ELSA-2025-2669
Oracle Linux 9	dotnet-sdk-8.0 +3	8.0.114-1.0.1.el9_5	ELSA-2025-2669
Oracle Linux 9	dotnet-sdk-9.0 +5	9.0.104-1.0.1.el9_5	ELSA-2025-2668
Oracle Linux 8	dotnet +6	9.0.104-1.0.1.el8_10	ELSA-2025-2667
Oracle Linux 8	dotnet-host +8	9.0.3-1.0.1.el8_10	ELSA-2025-2667
Oracle Linux 8	dotnet-hostfxr-8.0 +7	8.0.14-1.0.1.el8_10	ELSA-2025-2670
Oracle Linux 8	dotnet-sdk-8.0 +3	8.0.114-1.0.1.el8_10	ELSA-2025-2670

Affected packages

Ecosystem	Package	Affected	Fixed	Record
NuGet	Microsoft.AspNetCore.App.Runtime.linux-arm	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-arm	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-arm	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-arm64	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-arm64	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-arm64	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-musl-arm	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-musl-arm	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-musl-arm	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-musl-arm64	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-musl-arm64	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-musl-arm64	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-musl-x64	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-musl-x64	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-musl-x64	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-x64	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-x64	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.linux-x64	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.osx-arm64	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.osx-arm64	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.osx-arm64	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.osx-x64	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.osx-x64	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.osx-x64	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-arm	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-arm	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-arm	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-arm64	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-arm64	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-arm64	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-x64	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-x64	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-x64	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-x86	>= 8.0.0, < 8.0.14	8.0.14	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-x86	>= 9.0.0, < 9.0.3	9.0.3	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.App.Runtime.win-x86	>= 6.0.0, <= 6.0.36	—	GHSA-2865-hh9g-w894
NuGet	Microsoft.AspNetCore.Identity	>= 2.3.0, < 2.3.1	2.3.1	GHSA-2865-hh9g-w894

Advisories 20

ALSA-2025:2668 Important: .NET 9.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2025:2669 Important: .NET 8.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2025:2667 Important: .NET 9.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2025:2670 Important: .NET 8.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2025:2670 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
RHSA-2025:2669 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
RHSA-2025:2668 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
RHSA-2025:2666 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
RHSA-2025:2667 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
USN-7345-1 dotnet8, dotnet9 vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
WID-SEC-2025-0539 Microsoft Developer Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 7, 2025
RLSA-2025:2667 Important: .NET 9.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · May 7, 2025
RLSA-2025:2670 Important: .NET 8.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · May 7, 2025
ALAS2023-2025-912 Important: dotnet8.0 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Apr 1, 2025
ELSA-2025-2669 Important: .NET 8.0 security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Mar 12, 2025
ELSA-2025-2668 Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Mar 12, 2025
ELSA-2025-2667 Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Mar 12, 2025
ELSA-2025-2670 Important: .NET 8.0 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Mar 12, 2025
NCSC-2025-0079 Kwetsbaarheden verholpen in Microsoft Developer Tools NCSC-NL (Netherlands) · Mar 11, 2025
MSRC-CVE-2025-24070 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability Microsoft Security Response Center · Mar 11, 2025

References

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability vendor-advisory patch

CNA	v3.1	7.0
EUVD	v3.1	7.0
OSV:GHSA	v3.1	7.0