Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
CVE-2025-26646
Good to know:
Date: May 13, 2025
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
Severity Score
Related Resources (7)
Severity Score
Weakness Type (CWE)
External Control of File Name or Path
CWE-73Top Fix
Upgrade Version
Upgrade to version Microsoft.Build.Tasks.Core - 15.9.30;Microsoft.Build.Tasks.Core - 16.11.6;Microsoft.Build.Tasks.Core - 17.8.29;Microsoft.Build.Tasks.Core - 17.10.29;Microsoft.Build.Tasks.Core - 17.12.36;Microsoft.Build.Tasks.Core - 17.13.26;Microsoft.Build.Tasks.Core - 17.14.8;microsoft.build.tasks.core - 15.9.30;microsoft.build.tasks.core - 16.11.6;microsoft.build.tasks.core - 17.8.29;microsoft.build.tasks.core - 17.10.29;microsoft.build.tasks.core - 17.12.36;microsoft.build.tasks.core - 17.13.26;microsoft.build.tasks.core - 17.14.8
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | LOW |
| User Interaction (UI): | REQUIRED |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | HIGH |
| Integrity (I): | HIGH |
| Availability (A): | HIGH |