Skip to content
OpenAdvisories
High · 8.8 CVE-2021-43877 EUVD-2021-30739

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Published Dec 15, 2021 · Updated Nov 2, 2026 · Assigned by microsoft

Vendor: Microsoft Product: ASP.NET Core 3.1 Product: ASP.NET Core 5.0 Product: ASP.NET Core 6.0 Product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Product: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) Product: Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Product: Microsoft Visual Studio 2022 version 17.0 Product: Microsoft Visual Studio 2022 version 17.1

Description

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) 16.0.0 – < 16.7.23 16.7.23
Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) 15.0.0 – < 16.9.15 16.9.15
Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) 16.11.0 – < 16.11.8 16.11.8
Microsoft Microsoft Visual Studio 2022 version 17.0 17.0.0 – < 17.0.3 17.0.3
Microsoft ASP.NET Core 3.1 3.0 – < 3.1.22 3.1.22
Microsoft ASP.NET Core 5.0 5.0 – < 5.0.13 5.0.13
Microsoft ASP.NET Core 6.0 6.0 – < 6.0.101 6.0.101
Microsoft Microsoft Visual Studio 2022 version 17.1 17.0.0 – < 17.1.4 17.1.4

References