Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-43877

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Description

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)

  • 16.0.0 to < 16.7.23affected

Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)

  • 15.0.0 to < 16.9.15affected

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)

  • 16.11.0 to < 16.11.8affected

Microsoft Microsoft Visual Studio 2022 version 17.0

  • 17.0.0 to < 17.0.3affected

Microsoft ASP.NET Core 3.1

  • 3.0 to < 3.1.22affected

Microsoft ASP.NET Core 5.0

  • 5.0 to < 5.0.13affected

Microsoft ASP.NET Core 6.0

  • 6.0 to < 6.0.101affected

Microsoft Microsoft Visual Studio 2022 version 17.1

  • 17.0.0 to < 17.1.4affected

References