ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
CVE-2021-43877

8.8HIGH

Key Information:

Vendor: Microsoft
Status: Microsoft Visual Studio 2019 Version 16.7 (includes 16.0 – 16.6); Microsoft Visual Studio 2019 Version 16.9 (includes 16.0 - 16.8); Microsoft Visual Studio 2019 Version 16.11 (includes 16.0 - 16.10); Microsoft Visual Studio 2022 Version 17.0
Vendor: CVE Published:; 15 December 2021

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

ASP.NET Core 3.1 Unknown 3.0 < 3.1.22

ASP.NET Core 5.0 Unknown 5.0 < 5.0.13

ASP.NET Core 6.0 Unknown 6.0 < 6.0.101

0% chance of being exploited in the next 30 days.

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Changed

NVD DatabaseMitre Database