high8.8
CVE-2021-43877
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Impact
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Asp.Net Core | Versions 3.1, 5.0, 6.0 |
| Microsoft | Visual Studio 2019 | Versions 16.7, 16.9, 16.11 |
| Microsoft | Visual Studio 2022 | Version 17.0 |
| Microsoft | Microsoft Visual Studio 2019 Version 16.7 (Includes 16.0 – 16.6) | from 16.0.0 before 16.7.23 |
| Microsoft | Microsoft Visual Studio 2019 Version 16.9 (Includes 16.0 - 16.8) | from 15.0.0 before 16.9.15 |
| Microsoft | Microsoft Visual Studio 2019 Version 16.11 (Includes 16.0 - 16.10) | from 16.11.0 before 16.11.8 |
| Microsoft | Microsoft Visual Studio 2022 Version 17.0 | from 17.0.0 before 17.0.3 |
| Microsoft | ASP.NET Core 3.1 | from 3.0 before 3.1.22 |
| Microsoft | ASP.NET Core 5.0 | from 5.0 before 5.0.13 |
| Microsoft | ASP.NET Core 6.0 | from 6.0 before 6.0.101 |
| Microsoft | Microsoft Visual Studio 2022 Version 17.1 | from 17.0.0 before 17.1.4 |