CVE-2021-43877: ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
First published: Wed Dec 15 2021(Updated: )
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| =3.1 | ||
| =5.0 | ||
| =6.0 | ||
| =16.7 | ||
| =16.9 | ||
| =16.11 | ||
| =17.0 | ||
| Microsoft ASP.NET Core | =3.1 | |
| Microsoft ASP.NET Core | =5.0 | |
| Microsoft ASP.NET Core | =6.0 | |
| Microsoft Visual Studio 2019 | =16.7 | |
| Microsoft Visual Studio 2019 | =16.9 | |
| Microsoft Visual Studio 2019 | =16.11 | |
| Microsoft Visual Studio 2022 | =17.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-43877?
CVE-2021-43877 is an elevation of privilege vulnerability in ASP.NET Core and Visual Studio.
What is the severity of CVE-2021-43877?
CVE-2021-43877 has a severity score of 7.8, which is considered high.
Which software is affected by CVE-2021-43877?
The affected software includes Microsoft ASP.NET Core versions 3.1, 5.0, and 6.0, as well as Microsoft Visual Studio 2019 versions 16.7, 16.9, and 16.11, and Microsoft Visual Studio 2022 version 17.0.
How do I fix CVE-2021-43877?
To fix CVE-2021-43877, apply the latest security updates provided by Microsoft.
Where can I find more information about CVE-2021-43877?
You can find more information about CVE-2021-43877 on the Microsoft Security Response Center website.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/description
- agent/title
- agent/severity
- agent/references
- agent/remedy
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft asp.net core
- version/microsoft asp.net core/3.1
- version/microsoft asp.net core/5.0
- version/microsoft asp.net core/6.0
- canonical/microsoft visual studio 2019
- version/microsoft visual studio 2019/16.7
- version/microsoft visual studio 2019/16.9
- version/microsoft visual studio 2019/16.11
- canonical/microsoft visual studio 2022
- version/microsoft visual studio 2022/17.0