8.8
High
CVE-2021-43877 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Description
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) 16.0 | 16.0.0 → < 16.7.23 | 16.7.23 |
| Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) 15.0 | 15.0.0 → < 16.9.15 | 16.9.15 |
| Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) 16.11 | 16.11.0 → < 16.11.8 | 16.11.8 |
| Microsoft Visual Studio 2022 version 17.0 17.0 | 17.0.0 → < 17.0.3 | 17.0.3 |
| ASP.NET Core 3.1 3.0 | 3.0 → < 3.1.22 | 3.1.22 |
| ASP.NET Core 5.0 5.0 | 5.0 → < 5.0.13 | 5.0.13 |
| ASP.NET Core 6.0 6.0 | 6.0 → < 6.0.101 | 6.0.101 |
| Microsoft Visual Studio 2022 version 17.1 17.0 | 17.0.0 → < 17.1.4 | 17.1.4 |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
The 32 CVEs of Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) →
CVE-2022-24513
Visual Studio Elevation of Privilege Vulnerability
7.8
High
CVE-2022-24512
.NET and Visual Studio Remote Code Execution Vulnerability
6.3
Medium
CVE-2022-24464
.NET and Visual Studio Denial of Service Vulnerability
7.5
High
CVE-2022-21871
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
7.0
High