{"id":"EUVD-2025-34427","revision":"00bd8c320a7e42af85e351f016d4179a","records":[{"revision":"00bd8c320a7e42af85e351f016d4179a","observedAt":"2026-11-03T01:02:36.918+00:00","statement":{"source":"euvd","id":"EUVD-2025-34427","aliases":["CVE-2025-55247","GHSA-q8g5-rw97-f55h","GHSA-w3q9-fxm7-j8fq"],"title":"Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.","description":"Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":7.3,"severity":null}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55247"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-34427","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 14, 2025, 5:00:09 PM","dateUpdated":"Feb 22, 2026, 5:24:10 PM"},"relatedAdvisories":[{"id":"msrc_CVE-2025-55247","title":".NET Elevation of Privilege Vulnerability","vulnerabilityIds":["CVE-2025-55247"]},{"id":"RHSA-2025:23225","title":"Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.25.0 Release.","vulnerabilityIds":["CVE-2024-4067","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315","CVE-2025-55752","CVE-2025-61927","CVE-2025-66516"]},{"id":"RHBA-2025:20916","title":"Red Hat Bug Fix Advisory: .NET 10.0 bug fix and enhancement update","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55315"]},{"id":"RHSA-2025:18148","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2025:18256","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2026:9205","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-26646","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:9080","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-26646","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2025:18150","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2025:18153","title":"Red Hat Security Advisory: .NET 9.0 security update","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"NCSC-2025-0313","title":"Kwetsbaarheden verholpen in Microsoft Developer Tools","vulnerabilityIds":["CVE-2025-25004","CVE-2025-54132","CVE-2025-55240","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHBA-2025:20993","title":"bugfix update for dotnet10.0","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55315"]},{"id":"RHSA-2025:18149","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2025:18151","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2025:18152","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-34427","identifiers":["EUVD-2025-34427","CVE-2025-55247","GHSA-q8g5-rw97-f55h","GHSA-w3q9-fxm7-j8fq"]},"retained":false,"historicalAffected":[]}],"coverage":[]}