.NET Core and Visual Studio Information Disclosure Vulnerability
CVE-2021-34485

5MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Visual Studio 2017 Version 15.9 (includes 15.0 - 15.8); Microsoft Visual Studio 2019 Version 16.4 (includes 16.0 - 16.3); Microsoft Visual Studio 2019 Version 16.7 (includes 16.0 – 16.6); Microsoft Visual Studio 2019 Version 16.9 (includes 16.0 - 16.8)
Vendor: CVE Published:; 12 August 2021

What is CVE-2021-34485?

.NET Core and Visual Studio Information Disclosure Vulnerability

.NET 5.0 Unknown 5.0.0 < 5.0.9

.NET Core 2.1 Unknown 2.1 < 2.1.30

.NET Core 3.1 Unknown 3.1 < 3.1.18

Score:

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet