May 2021: .NET and Visual Studio Elevation of Privilege Vulnerability
CVE-2021-31204 Published on May 11, 2021

.NET and Visual Studio Elevation of Privilege Vulnerability
.NET and Visual Studio Elevation of Privilege Vulnerability

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Weakness Type

Improper Privilege Management

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Products Associated with CVE-2021-31204

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-31204 are published in these products:

Microsoft Net

Microsoft .NET Core

Microsoft Visual Studio 2019

Fedora Project Fedora

Affected Versions

Microsoft .NET Core 3.1:

Version 3.1 and below 3.1.15-servicing.21214.3 is affected.

Microsoft .NET 5.0:

Version 5.0.0 and below 5.0.6-servicing.21220.11 is affected.

Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8):

Version 15.0.0 and below publication is affected.

Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3):

Version 16.0 and below publication is affected.

Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6):

Version 16.0.0 and below publication is affected.

Microsoft Visual Studio 2019 for Mac version 8.9:

Version 8.0 and below publication is affected.

Exploit Probability

EPSS

1.19%

Percentile

67.13%