7.5
High
CVE-2021-26423 .NET Core and Visual Studio Denial of Service Vulnerability
Description
.NET Core and Visual Studio Denial of Service Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) 15.9 | 15.9.0 → < 15.9.38 | 15.9.38 |
| Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) 16.0 | 16.0 → < 16.4.25 | 16.4.25 |
| Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) 16.0 | 16.0.0 → < 16.7.18 | 16.7.18 |
| Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) 15.0 | 15.0.0 → < 16.9.10 | 16.9.10 |
| Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9) 16.10 | 16.10.0 → < 16.10.5 | 16.10.5 |
| Visual Studio 2019 for Mac version 8.10 8.1 | 8.1.0 → < 8.10.7 | 8.10.7 |
| .NET Core 2.1 2.1 | 2.1 → < 2.1.30 | 2.1.30 |
| .NET Core 3.1 3.1 | 3.1 → < 3.1.18 | 3.1.18 |
| .NET 5.0 5.0 | 5.0.0 → < 5.0.9 | 5.0.9 |
Show the 2 other branches Hide the 2 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerShell Core 7.1 7.1 | 7.1.0 → < 7.1.4 | 7.1.4 |
| PowerShell Core 7.0 7.0 | 7.0.0 → < 7.0.7 | 7.0.7 |
References
- .NET Core and Visual Studio Denial of Service Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
The 74 CVEs of Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) →
CVE-2026-47304
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature…
8.1
High
CVE-2026-32175
A tampering vulnerability exists when .NET Core improperly handles specially crafted files
4.3
Medium
CVE-2026-32177
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally
7.3
High
CVE-2025-55240
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally
7.3
High