<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 04:21:21 +0000</lastBuildDate>
    <item>
      <title>CVE-2025-24070 — ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-24070</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft ASP.NET Core 8.0, Microsoft ASP.NET Core 9.0, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.13, Microsoft Visual Studio 2022 version 17.8&lt;/p&gt;
&lt;p&gt;Weak authentication in ASP.NET Core &amp;amp;amp; Visual Studio allows an unauthorized attacker to elevate privileges over a network.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft ASP.NET Core 8.0, Microsoft ASP.NET Core 9.0, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.13, Microsoft Visual Studio 2022 version 17.8&lt;/p&gt;
&lt;p&gt;Weak authentication in ASP.NET Core &amp;amp;amp; Visual Studio allows an unauthorized attacker to elevate privileges over a network.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-24070</guid>
    </item>
  </channel>
</rss>
