What is CVE-2025-24070?

CVE-2025-24070 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2025-24070 cover?

CVE-2025-24070 covers the following CVE IDs: CVE-2025-24070. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2025-24070?

CVE-2025-24070 has a CVSS v3 base score of 7.0, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2025-24070?

CVE-2025-24070 affects 6 products, including: ASP.NET Core 8.0; ASP.NET Core 9.0; Microsoft Visual Studio 2022 version 17.10; Microsoft Visual Studio 2022 version 17.12; Microsoft Visual Studio 2022 version 17.13; and others — see the full list on the advisory page.

CVE-2025-24070HighCVSS 7.0

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

July 11, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2025-24070 →

📋 Description

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

🎯 Affected products6

ASP.NET Core 8.0
ASP.NET Core 9.0
Microsoft Visual Studio 2022 version 17.10
Microsoft Visual Studio 2022 version 17.12
Microsoft Visual Studio 2022 version 17.13
Microsoft Visual Studio 2022 version 17.8

✅ Remediation

KB5054229 (Security Update) — fixed build 8.0.14 KB5054230 (Security Update) — fixed build 9.0.3 KBRelease Notes (Security Update) — fixed build 17.12.6 KBRelease Notes (Security Update) — fixed build 17.13.3 KBRelease Notes (Security Update) — fixed build 17.8.19 KBRelease Notes (Security Update) — fixed build 17.10.12

🔗 References (10)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24070
patchhttps://dotnet.microsoft.com/en-us/download/dotnet/8.0
referencehttps://support.microsoft.com/help/5054229
patchhttps://dotnet.microsoft.com/en-us/download/dotnet/9.0
referencehttps://support.microsoft.com/help/5054230
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12
referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.13
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.8
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.10