CVE-2025-55248

MEDIUM

.NET - Info Disclosure

Title source: llm

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.

CVSS v3 4.8

EPSS 0.0003

EPSS Percentile 7.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-326

Status published

Products (23)

microsoft/.net 8.0.0 - 8.0.21

microsoft/.net_framework 4.6.2

microsoft/.net_framework 4.7

microsoft/.net_framework 4.7.1

microsoft/.net_framework 4.7.2

microsoft/.net_framework 3.5.1

microsoft/.net_framework 3.5

microsoft/.net_framework 4.8.1

microsoft/.net_framework 4.8

microsoft/.net_framework 3.0 sp2

... and 13 more

Published Oct 14, 2025

Tracked Since Feb 18, 2026