CVSS 3.1
8.0 highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HCVE-2025-26646
High (8.0) in microsoft. EPSS 1.3% chance of exploitation in the next 30 days.
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-73
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:.net
- microsoft:build_tools
- microsoft:visual_studio_2022