Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability

Affected packages

• Microsoft.AspNetCore.App.Runtime.linux-arm— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.linux-arm64— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.linux-musl-arm— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.linux-musl-arm64— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.linux-musl-x64— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.linux-x64— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.osx-arm64— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.osx-x64— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.win-arm— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.win-arm64— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.win-x64— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.App.Runtime.win-x86— 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107
• Microsoft.AspNetCore.Server.Kestrel.Core— before 2.3.6

Exploit signal

Known exploited (CISA KEV)

No

EPSS score

—

EPSS percentile

—

EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.