EOL .NET 6.0 Runtime Remote Code Execution Vulnerability
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-122 and the CVSS impact.
Summary
A vulnerability (CVE-2025-21172) exists in msdia140.dll due to integer overflow and heap-based overflow. Per CWE-122: Heap-based Buffer Overflow, a heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Per CWE-190: Integer Overflow or Wraparound, is when a product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | .NET 6.0 | 6.0.0 to before 6.0.36 | 6.0.36 | Patch available | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.linux-arm | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.linux-arm64 | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.linux-musl-arm | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.linux-musl-arm64 | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.linux-musl-x64 | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.linux-x64 | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.osx-arm64 | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.osx-x64 | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.win-arm | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.win-arm64 | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.win-x64 | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
| Microsoft | Microsoft.NetCore.App.Runtime.win-x86 | >=6.0.0 – 6.0.36 | — | No fix listed | CNA |
- .NET 6.0 VendorMicrosoft Affected 6.0.0 to before 6.0.36 Fixed in 6.0.36 Patch available CNA
- Microsoft.NetCore.App.Runtime.linux-arm VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.linux-arm64 VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.linux-musl-arm VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.linux-musl-arm64 VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.linux-musl-x64 VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.linux-x64 VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.osx-arm64 VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.osx-x64 VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.win-arm VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.win-arm64 VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.win-x64 VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
- Microsoft.NetCore.App.Runtime.win-x86 VendorMicrosoft Affected >=6.0.0 – 6.0.36 Fixed in — No fix listed CNA
Remediation
- Fix · CNA .NET 6.0 (Microsoft) Fixed in 6.0.36
Timeline
- 2026-10-02 Threatist record created from CVE-2025-36853
- 2026-10-03 Alias added: GHSA-hg2w-qc44-hjcw
References
More Microsoft vulnerabilities
- TI-2026-42212 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2026-37256 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2026-26194 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2026-16982 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2025-36863 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2025-33671 Microsoft SharePoint Server Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-36853 · CVE Program
- CVE-2025-36853 · NVD
- FIRST EPSS
- GHSA-hg2w-qc44-hjcw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences