CVE-2025-55248
MEDIUMDescription
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
Is your site exposed to CVE-2025-55248?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| microsoft | .net_framework |
| microsoft | .net_framework |
| microsoft | .net_framework |
| microsoft | .net_framework |
| microsoft | windows_server_2008 |
| microsoft | windows_server_2012 |
| microsoft | windows_server_2012 |
| microsoft | .net_framework |
| microsoft | windows_server_2008 |
| microsoft | windows_server_2008 |
| microsoft | .net_framework |
| microsoft | windows_server_2008 |
| microsoft | .net_framework |
| microsoft | .net_framework |
| microsoft | windows_10_21h2 |
| microsoft | windows_10_22h2 |
| microsoft | windows_11_22h2 |
| microsoft | windows_11_23h2 |
| microsoft | windows_11_24h2 |
| microsoft | windows_11_25h2 |
| microsoft | windows_server_2022 |
| microsoft | windows_server_2022_23h2 |
| microsoft | .net_framework |
| microsoft | .net_framework |
| microsoft | windows_10_1809 |
| microsoft | windows_10_1809 |
| microsoft | windows_10_21h2 |
| microsoft | windows_10_22h2 |
| microsoft | windows_server_2019 |
| microsoft | windows_server_2022 |
| microsoft | .net_framework |
| microsoft | .net_framework |
| microsoft | windows_10_1607 |
| microsoft | windows_10_1607 |
| microsoft | windows_10_1809 |
| microsoft | windows_10_1809 |
| microsoft | windows_server_2016 |
| microsoft | windows_server_2019 |
| microsoft | .net_framework |
| microsoft | windows_server_2008 |
| microsoft | windows_server_2008 |
| microsoft | windows_server_2012 |
| microsoft | windows_server_2012 |
| microsoft | .net_framework |
| microsoft | windows_server_2008 |
| microsoft | windows_server_2008 |
| microsoft | .net |
| microsoft | .net |
| apple | macos |
| linux | linux_kernel |
| microsoft | windows |
| microsoft | visual_studio_2022 |
| microsoft | visual_studio_2022 |
| microsoft | visual_studio_2022 |
| microsoft | .net_framework |
| microsoft | windows_10_1607 |
| microsoft | windows_10_1607 |
| microsoft | windows_server_2008 |
| microsoft | windows_server_2012 |
| microsoft | windows_server_2012 |
| microsoft | windows_server_2016 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-55248? +
How severe is CVE-2025-55248? +
What products are affected by CVE-2025-55248? +
How do I check if I'm vulnerable to CVE-2025-55248? +
Related Vulnerabilities
Inadequate Encryption Strength vulnerability allow an authenticated attacker to execute arbitrary OS Commands via encrypted package upload.This issue affects Envoy: …
Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may …
A vulnerability exists in Algo Edge up to 2.1.1 - a previously used (legacy) component of navify® Algorithm Suite. The …
The use of a weak cryptographic key pair in the signature verification process in WPS Office (Kingsoft) on Windows allows …
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to …
Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or entropy is enforced on the JWT_SECRET …