Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-36854— EOL ASP.NET 6.0 Remote Code Execution Vulnerability

Quick assessment

Affected
Microsoft .NET 6.0
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Visual Studio和Microsoft .NET都是美国微软（Microsoft）公司的产品。Microsoft Visual Studio是一款开发工具套件系列产品，也是一个基本完整的开发工具集，它包括了整个软件生命周期中所需要的大部分工具。Microsoft .NET是一个致力于敏捷软件开发、快速应用开发、平台无关性和网络透明化的软件框架。 Microsoft .NET和Microsoft Visual Studio存在安全漏洞，该漏洞源于竞争条件可能导致释放后重用。

CVSS 8.1 · High EPSS 0.60% · P47

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-36854

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
EOL ASP.NET 6.0 Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution. Per CWE-416: Use After Free https://cwe.mitre.org/data/definitions/416.html , Use After Free is when a product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer. This issue affects EOL ASP.NET 6.0.0 <= 6.0.36 as represented in this CVE, as well as 8.0.0 <= 8.0.8, 9.0.0-preview.1.24081.5 <= 9.0.0.RC.1 as represented in  CVE-2024-38229 https://www.cve.org/CVERecord . Additionally, if you've deployed self-contained applications https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd  targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed. NOTE: This CVE only represents End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft .NET和Microsoft Visual Studio 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Visual Studio和Microsoft .NET都是美国微软（Microsoft）公司的产品。Microsoft Visual Studio是一款开发工具套件系列产品，也是一个基本完整的开发工具集，它包括了整个软件生命周期中所需要的大部分工具。Microsoft .NET是一个致力于敏捷软件开发、快速应用开发、平台无关性和网络透明化的软件框架。 Microsoft .NET和Microsoft Visual Studio存在安全漏洞，该漏洞源于竞争条件可能导致释放后重用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Microsoft .NET 6.0 6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.Identity >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.win-arm >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.win-arm64 >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.win-x64 >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.win-x86 >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.linux-arm >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.linux-arm64 >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.linux-musl-arm >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.linux-musl-x64 >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.linux-x64 >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.osx-arm64 >=6.0.0 ~ 6.0.36 -
Microsoft Microsoft.AspNetCore.App.Runtime.osx-x64 >=6.0.0 ~ 6.0.36 -

II. Public POCs for CVE-2025-36854

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-36854

请登录查看更多情报信息。

Other References for CVE-2025-36854 (1)

Same Patch Batch · Microsoft · 2025-09-08 · 5 CVEs total

CVE-2025-36855 8.8 HIGH EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
CVE-2025-36853 7.5 HIGH EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
CVE-2022-50238 7.4 HIGH Microsoft Windows Defender Application Control 安全漏洞
CVE-2025-59033 7.4 HIGH Microsoft Windows Defender Application Control 安全漏洞

IV. Related Vulnerabilities

Same product: .NET 6.0
Same vendor: Microsoft
Same weakness: CWE-416

V. Comments for CVE-2025-36854

No comments yet

Leave a comment