CVE-2021-26423

CVE-2021-26423

High · published August 12, 2021

CVSS v3.1

7.5

EPSS

4%

Percentile

90.2

In the wild

Unconfirmed

What it is

.NET Core and Visual Studio Denial of Service Vulnerability

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.03902 · 90.2th percentile
Published: 2021-08-12T22:15Z

Affected products (8)

Product	Versions	Fixed in
microsoft/.net	≥ 5.0, ≤ 5.0.8	—
microsoft/.net_core	≥ 2.1, ≤ 2.1.28	—
microsoft/.net_core	≥ 3.1, ≤ 3.1.17	—
microsoft/powershell_core	≥ 7.0, < 7.0.7	7.0.7
microsoft/powershell_core	≥ 7.1, < 7.1.4	7.1.4
microsoft/visual_studio_2017	≥ 15.0, ≤ 15.9	—
microsoft/visual_studio_2019	≥ 16.0, ≤ 16.10	—
microsoft/visual_studio_2019	all versions	—

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26423 · [email protected]https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26423 · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

12 AUG 18:11Z
.NET Core and Visual Studio Denial of Service Vulnerability
cvelistv5