Servers and applications
CVE-2025-55248
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
- Severity
- Medium 5.7
- Published
- 14 Oct 2025
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 22 Oct 2026
- Fixed in
- 8.0.21, 9.0.10
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
.NETServers and applications · cpe:a:microsoft:.net |
|